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Apple ][, ][ + , //e, 
Franklin users: 

Do you have problems 

backing-up your 

copy-protected programs? 

Do you tack parameters for 
your copy programs? 

Are you looking for programs 
that you can AFFORD? 

Are you hesitating to 

upgrade your equipment due to 

expensive prices 

quoted in other ads? 

It's simple now. 
Just drop us a line. 



Send $1.00 U.S. funds to: 

Reliant 

P.O. Box 33610 

Sheungwan, Hong Kong 



IMPORTANT: We have over 1000 PC name-brand 
programs and various hardware offers. Programs @ 
U.S. $8.00/PC includes the disk and registered air- 
mail handling. 
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THE 

FRANKLIN 

USERS 

GROUP 



* 



Support in g Users of 

II, II 4 , FRANKLINS, AND ALL COMPATIBLES 

We support all members with a monthly newsletter the XIane Ace,' a 
growing public domain library, and personal attention. 

MEMBEHSHIP IS $20.00 A YEAR. 



We offer hardware and software at great savings. 

Checkmate Multiview 801160 

80 to 1G0 column display and up to 48 lines. 

Compatible with II + 's and all compatibles. 

Supports all major operating systems incliding PCP I. 

Ml flUHS APPLEWORKS OW 64K GLDMES AND II + 'S !1! 

S299 

Axlon 320 RAM Disk 

Supports all major operating systems including PCP I 

«480 

THE FRANKLIN USERS GROUP 

East Wind Rd., Apt. L 
Tecumseh, MO 65790 





NOW 

AVAILABLE 

AT YOUR LOCAL 

COMPUTER STORE 



YOUR DISKS 



ESSENTIAL DATA DUPLICATOR Ml 



EDD runs cpn Appfa M, II plus, Me. lie and Appta lU (InemulErtiPn rnoije) using oneortwodrskdriveis. 

EDD allows you to easHy and qutckly make back up copies ofyour 
"uncopyable" Appte dliks. ■ Since EDD has been preset to copy 
the widest range of copy-protections possible, you Just simply 
boot up EDD, put the diskyouwanttocopyinonedlsk drive and 
a blank disk In the other (EDD will work using one drive also) 
and In about 2 V2 minutes a copy Is made. ■ Unlike the "copy- 
cards" which only copy "single load" programs, EDD copies 
the entire disk. This would be simitar to hooking up two 
cassette recorders, playing from one, and recording to the 
other. ■ We have even Included an option so you can check 
the speed of yoiirdlskdrlves t>ec3use drive speeds running 
fast or slow can damage disks arxl cause other problems. 
■ We publish EDD program lists (information about 
copy-protected disks) ewefy couple of months, which 
EDD owners can receive. The current list Is included 
with the purchase of EDD. ■ The bottom line Is this; if 
EDO can't copy It, chances are nothing will. 

Ask for EDD a< your focal computer store, or. 
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MQ to order direct: send $79.95 pdJS i2 shipping 
($5 foreign). Mastercard A^isa accepted. 

UTILICO MICROWARE 

3377 Solano Ave,, Suite #352 
Napa, CA 94558 (707)257-2420 



5 FREE DISKS 

With every set of 20 disks you order 

You con get sets for as low as $17.25. 

That's a totai of 25 dislcs for as iitie as... 

69i|: a disk 

These are SS/DO Namebrand* SV*" floppies 

100% guaranteed and include: 

reinforced hubs and write-protect tabs 



Send me . 
Send me . 



. seta wtthout sleeves at $17.25 per set 
. sets, wllti T^vek sleeves at $18.50 per set. 



Add $3 ehipping and handling for the tirat set, $1 (Or each additional set. Forelgfi otdan add 20^U.& Ibiids 
drawn on U.S. bank. Washington orders add 7.8% sates tax. Send your orders to: - ' 

Softlicy PuUishiiq, PC Box 110816, Taconia, WA »H11 ' ■ .1 . 



Name. 



—,-iM — ^lau 



^d&- 



■Jtis^ 



Addrms. 
City . 



;:5IOtaf- 






Country _ 
Signature . 
Vba/MC _ 



' r:..i i '! ' ,i '' ^ 'a 






jii^ 



M:'iM^^i^ " 









BA^ Of Vefboflm. 
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Let us know your 
NEW ADDRESS at 
least 30 days in 
advance so you 
won't miss a single 
issue of Hardcore 
COMPUTIST (issues 
missed due to non- 
receipt of change of 
address may be 
obtained at the 
current back-issue 
rate). 



Fill out your new addr«M on 
the form provided, paste 
your present address label In 
the space below and sertd It 
to: 

Hardcore COMPUTIST, 
Subscription Oept., PC Sox 
110846-T, Taooma, WA 9S411. 
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Many of the articles published in Hardcore COMPUTIST detail the removal of copy protection 
schemes from commercial disks or contain information on copy protection and backup methods 
in general. We also print bit copy parameters, tips for adventure games, advanced playing 
techniques (APT's) for arcade game fanatics and any other information which may be of use 
to the serious Apple user. 

Hardcore COMPUTIST also contains a special CORE section which focuses on information 
not directly related to copy protection. Topics may include, but ate not limited to: tutorials, 
hardware/software product reviews and application and utility jHOgrams. 



What b A Softkey Anyway? SofUwy is a lenn 
wliich wc coined to describe a piocedure that removes. 
or B[ teail circumvents, any copy protection on a 
panicular disk. Once a sofUcey procedure has been 

performed, the resulting disk can uswily be copied by 
the use of Axle's COPY A program (on the DOS 3.3 
System Master Disit). 

Cotnraandi And CoBlrob: In aiiy aitide appearing 

in Hardcore COMPUTIST, commands which a reader 
is required to perfonn ire set apin from nonrwl text by 
being indenied and bold. An exainple is: 

Follow this with the RETURN key. The RETURN key 
must be pressed atthe end of every audi command unless 
otherwise spcciried. 

Control cikaracters are indicittd by being boxed. An 
examine ii: 

To com{>leie this command, you miut tint type the 
number 6 and then place one finger on (be CHItL key 
and one finger on the P key. 

Requirements: Most of the programs and wftkeys 
which appear in Hardcore COMPUTIST require one of 
the Apple || series of computer and at least on disk drive 

with DOS 3.3. Occasionally, sorrte programs nrtd 
procedures have special requirement*. The prerequiaites 
for deproteciion teclmiques or prognum will always be 
listed at the beginning of the iftide under (he 
"Requirements:" heading. 

Software ReGommenilatJons: The following pro- 
grams (or simitar ones) are strongly recommended for 
readers who wish to obtain the most t>eitefil from our 

articles: 

1) AnUesott Program Editor such as Global Progtcun 
Line Editor (GPLE). 

i) Sector EdMor such as CHskEdtt. ZAP from Ba« of 

Tricks or Tricky Dick from The CIA. 
3) IHsk Seartb Utility such as The Inspector, The 

Tracer from The CIA or The CORE Disk Searcher. 
4> Assembler such as the SCAssemtiler or Merim^g 

Mac. 
5) Bit Copy Progratn such as Copy |[ Plus. Locksmidi 

or The Essentia] Data Duplicator 
t) Ten EdMor capable of pdxtucing nomiaJ tHjumtial 

text files such as Applewrtler |(. Magic Window )( 

or Screenwriter ][, 
You will also find COPYA. FID and MUFFIN ^om 
the DOS 3.3 System Master Disk useftd. 
Super lOB: This program has moat recendy appeared 
in Hardcore COMPUTIST No. 21. Several loftkey 
procedures will trtake use of a Super lOB controller, a 
small program that must be keyed into the middle of 
Super lOB. The controller chstiges Super lOB so that 
it can copy different diskn. To get the latest version of 
thii program, you nuy order Hardcore COMPUTIST 
No. 22 as I t>ack issue or order Program Library Did 
No. 22, 

RESET Into The Mooftor: Many softkey pro- 
cedures require that the user be able to enter the Apple's 
system monitor during the execution of a copy protected 
prc^nm. Check the following lis( (o loe what hardware 
you will need to ot)tain this ability. 
Apple ][ Plus • Apple lie ■ Apple compatlblei: I ) Place 
an Integer BASIC ROM card in one of the Apple slou. 

2) Uk a non-maskable in(errup( (NMI) card such ai 
Rq>lay or Wildcard. 

A^f^ ][ Plus - Apple compiUlblei; I ) Install an FS ROM 
with a modified RESET vector on the computer's 



mothcrtwanl as detailed in the "Modified ROM 's" article 
of Hardcore COMPUTIST No 6 or the 'Dual ROM V 
artkle in Hardcore COMPUTIST No. 19. 
Apple lit - Apple lit: Iniull a modified CD ROM on 
the computer') motherboaid. Don Lancaster's company 
(Synergetics; 746 First Street; Box 8W-HC; Thatcher, 
AZ 85552; free voice HelpUne 602-42S^73) sells the 
insttucoons necessary to nuke diis modification. Making 
this modification to an Apple f/c will void its wananty 
but the increased ability to remove copy protection may 
justify it. 

RecORunended Literstiire: The Apple ][ Reference 
Manual and DOS 3.3 manual are musts for any serious 
Apple user. Other hdptiil books include: Beneath Apple 
DOS, Don Worth and Peter Leichner, Quality Software, 
S19.95; Asiembly Language For Tke AppUtofi 
Programmer. Roy Meyers and C.W, Finley, Addison 
Wesley, SI 6.95; and Wlua's Where In The Apple. 
William Ubert, Micro Ink.. $24.95. 
Keyliig In Appkscrft Programs: BASIC ptogrMits 
are printed in Hardcore COMPUTIST in a IbrmM that 
is designed to minimize errors for readers who key in 
tliese programs. To understand this format, you must 
first understand the formatted LIST feature of Applesoft. 

An illustration- If you strike these keys: 

It HOIMEiREMCLEAR SCREEN 
a program will be stored in the computer's ntenrary. 
Strangely, this program will noi have a LIST that is 
exactly as you typed it. Instead, (he LIST will look like 
this: 

la ROME : REM CLEAR SCREEN 

Programs don't usually LIST the same as they were 
keyed in because Applesoft inserts spaces irto i program 
listltig before and after every command word or 
mathematical operator. These spaces usually don't pose 
a'problem except in line numbers which contain REM 
or DATA command words. The space inserted after diese 
conunand words can be misleading. For example, if you 
want a program to have a list tike (his: 

II DATA 67,45,54,52 
you would have to omit die space directly after the DATA 
command word. If you were to key in the space directly 
after the DATA conunand word, the LIST of the piqgram 
would look like this: ., „ 

If DATA 67.45,54,52 ' " ' 
This UST ia different from the LIST you wanted. The 
number of spaces you key after DATA and REM 
command words is very important. 

All of diii brings us to the Hardcore COMPUTIST 
USTing format. In a BASIC LiSTing. there are two types 
of spaces; spaces dm don't matter whether d^y are keyed 
or not and spaces that must be keyed. Spaces that must 
be keyed in are printed as delta characters (^). All other 
spaces in a Hartkore COMPUTIST BASIC listing are 
put there for easier leading and it doetii't matter whether 
you type them or not. 

There is one exception: If you want your checksums 
(See "Corrquting Checksums" section) to miich up. you 
nuur na key in any spaces after a DATA command word 
unless they are marked by delta characters. 
Keyltlg In Hexdtinipi: M^^hine language programs 
ire printed in Hardcore COMPUTIST as both raurce 
code and hexdumps. Only one of these formats need be 
keyed in to get a machine language program. Hexdumps 
are the shortest and easiest format to type In. 

To key in hexdumps, you must first enter the monitor: 

CALL -151 

Now key in the hexdump exactly at it appears in the 
magazine ignoring the four digit checksum at the end 
of each line (a "S" and four digits). If you hear a beep, 



you will know that you have typed sodoetftiiig 
incorrectly and must retype that line. 

When finished, return to BASIC with a: 

EN3G 
Remember (o BSAVE the program with the correct 
filename, address and length panmeten as given in 
the article. 

Keying In Source Cotle The source code 
portion of a machine language program is provided 
only to better explain the program's operation. If you 
wish to key it in, you will need an assembler. The 
S-C Assembler is used to generate all source code 
printed in Hardcore COMPUTIST. Without this 
attemblcr, you will have to translate pieces of the 
nurce code into something your M«embler wilt 
under3tand. A table of S-C AssenMer directives just 
for this purpose was printed in Hardcore 
COMPUTIST No. 17. To translate souicc code, you 
will need to understand the directives of your 
assembler and convert the directive* used in the 
source code listing to similar directives used by your 
assembler. 

Computing Checksums Checksums are four 
digit liexadecimal numbers which verify whether or 
not you keyed a program exactly as it was printed 
in Hardcore COMPUTIST. There are two types of 
checksums: one created by the CHECKBIN pnigram 
(for machine language pn>grams> and the other 
created by the CHECKSOFT program (for BASIC 
programs). Both programs appeared in Hardcore 
COMPUTIST No. I and The Best of Hardcore 
Computing. An update to CHECKSOFT appeared 
in Hardcore COMPUTIST No. 18. If the checksums 
these programs create on your computer match the 
checksums accompanying the program in the 
magazine, ttien you keyed in the pn^ram correctly. 
If not, the program is incorrect at the line where the 
Tirst checksum differs, 

1) To compute CHECKSOFT checksums: 
LOAD fHewMM 
BRUNCHECKSOFT ,,. ^. = 

Get the checksums with v-. 

ft 
And oofiect the piognan where the checksums differ. 

2) To compute CHECKBIN checksums: 
CALL -151 .-=. -J 
BLOAD niename 

Install CHECKBIN ai an out of the way place 

BRUN CHECKBIN,A$6*M 
Get the checksums by typing the starting addrest,. 
a period and ending address of the file followed t^ 

kxx.xxxOS ■■""" 

And correct the lines at which the checksunu differ. 



How-To'S 
Of Hardcore 

Welcome to Hardcore COMPUTIST, a 
ptibllcation devoted to the serious user of 
Appk ][ and Apple ]( compatible computers. 
Our inasaziiK contains information you are 
not likely to find In any of the other miOor 
journals dedicated to the Apple market. 

Our editorial policy is that we do NOT 
condoiK software piracy, but we do believe 
that honest users are entitled to backup 
commercial disks they have purchased. In 
addition to the security of a backup disk, 
the removal of copy protection gives tlie ikct 
the option of modlfyint; application 
programs to meet his or her needs. 

New readers are advised to read this page 
carefully to avoid frustration when 
attempting to follow a softkey or when 
entering the programs printed In this issue. 
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Thh moiUh's covtr: Graphics from DEATH IN THE 
CASIBBEAN, a hi-res advrnture gome from Micro Lab^ 

Address aU advertising inquiries la Haidoan OCMPUTiST, 
Advertising iJeparvnent, i^BoK 110816. Tacoma.WA 98411. 
Mail manuscripts or requests for Writer's Guides to IHardcoro 
COMPUTiST, PO Bojt 1 10e46-K, Tacoma, WA 98411. 

Hetum postao* <nust accompany aii manuscripts, drawings, 
phoM*. dhkt. or tapes it they are lo be returned. Unsolicited 
manuscripts will be returned cnfy it adequ&te return postals Is 
included. 

Entlrs contents oopyhghl ISSG by SoMKey Publlehlng. Al 
rights rsMTusd. Copylrtg done tar otiMr than personal or intwnst 
referenca (without express wdtMn parmlsslon trom tha publlshM) 
Is prohibited. 

The adltoriai sun assumes no liability or mponslblllty tor the 
BfDduoti advertised in ths megazlna. Any oplnkina axprassad 
by tha mthois are not rvscessariiy ttiosB ct Hardcore 
COMPUTIST msgRzlne or SottKey PublisMr>g. 

Apple uBusiiy raters to the Apple t| or )| Plus Computer, and 
is a tradernarlt of Apple CompuierSi inc. 

SUBSCRIPTIONS: Rales (lor fi issues): U.S. $70. U.S. 1 St 
Class 134, Canada 134. Metlco 139. Foreian $80. Direct 
inquiries to: Hardear* COUH11IS1, Subscription 
Dvpatfment. PO Sox ))0846-T. Tacoma, WA 9a4ll. Plaaea 
includB aiidrass tsbel with correspondeiKe. 

DOMESTIC DeAtEn RATES: Call (206) 474-8750 tor mora 

intormallon. 

Ctiartga 01 Addresa: Pieesa siiow 4 weeks for cttange of 

address to take eHect. Use postal torm 3576 to supply your new 

ar\d former addrasa using your most receni magazine label. 

Issues missed due to non-receipt of change of address may be 

acquired at the rsgular bacli Issue rate. 
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softkeys ' ■"'- - 

10 Choplifter 

Now you can shorten the boot up time and have a depiotectcd Choplifter as well as APT control 
keys that let you really take command, by Todd C. Wilson 

13 Muffplot 

Ham radio operatois, by the Super lOB's Swap Controller and a modified Mu^ot RWTS to softkey 
this program, by Edward E. Harte, M.D. 

14 Flashcalc 

Believe it or not, Flashcalc is effectively protected by one byte. Learn about ProDOS protection 
schemes by softkey ing this business utility, by Doni G. Grande 

16 Karateka 

With smooth graphics, great sound effects, and realistic action, how could this game miss being 
equally well protected? Kick your way to a COPYA-ablc version, by Datmy Pollak 

18 Newrsroom 

This handy graphic package is quickly normalized with Super lOB. by Doni G. Grande 

20 E-Z Draw 

Some older programs have sophisticated protection schemes worth exploring. This 1980 graphics 
system is made COPY -able in our Antique Softkey section, by Nick GaibreaA 

features 

2 1 Using J1.R.D. lo Saftlcey Mars Clars 

This fun litde maze-type game reboots everytime Reset is pressed. This and others that do the 
same thing can be softkeyed by using the Anti-Reboot Disk.^ Oiris Oienault 

22 How to be the Writemaster 

Our hardware special feature shows you how to take command of the write-protect status of your 
disk by adding your own switch, by William Wingfield Jr. 

core 

24 Wheel of Money 

The Wheel of Fortune TV game show comes to your computer screen, by Jim Feingold and Ray 
Darrah. 

departments — - - 

4 Input 

6 Most Wanted List 

6 Bugs 

7 Readers' Softkey & Copy Exchange 

Softkeys for: Spectrum Holobyte's Gato by Clay Harrell, Microtab's Dino Eggs by Jay 'Dotmell, 
Electronic Art's Pfnball Construction Set by Steve Hite, Avalon HiU's TAC by Ken Black, 
Broderbund's The Print Shop: Graphics Library by Greg Sckroeder, Micro Li^'s Death In 
The Caribbean by Nick Galbreatk. 
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Please address letters to: 

Hardcore COMPUTIST 

Editorial Department 

PO Box 11084&-K 

Tacoma, WA 98411 



Include your name, address and 

phone. 

Correspondence appearing in the 
INPUT section may be edited for 
clarity and space requirements, (n 
addition, because of the great 
number of letters that we receive and 
the small size of our staff, a response 
to each letter is not guaranteed. 



Unlocking 

Lode Runner's 

150 Levels 



I have found a way to unlock Lode Runner's 
15ft levels. You should start by write protecting 
the original disk, just to be safe. Then get out 
your best Bit copier and copy tracks .1-B. Then 
get out a sector editor and select the DOS 3..1 
PATCHED option. Copy sectors C, B-C. 5. 
Now you can look at and edit any levels you 
can't get passed. 

Paul Kippes 
Colby, KS 



Hitchhiker's 
Adventure Tips 



Look behind the bar. 

The dog appears to be hungry. 

Have a drink or three. 

Wtmt can you block the robot panel with? 
(Hint, It's not yours.) 

A cleaning robot would probably miss some 
things if there was some way to have the mail 
in the air while the babe) fish is in the air too. 

You'll need the atomic vector plotter. 

Gel some "Common Sense". 

The long, dangly bit could do with a spot of 



tea, or at least something tliat tastes almost, but 
not quite entirely unlike tea. 

The guarils can't kill you if their rifles are 
blasted. 

The seat cushion feels lumpy. 

Steer your boat at something dangerous. 

Don't be afraid to say your name to the Beast. 

Cover up! The Beast can't stop you from 
carving your name if it can't see you. 

Who am I? < RETURN > 

It is essential to give back a towel one has 
borrowed if that person's planet is about to blow 
up. 

Have a talk with Prosser before going to the 
pub with Arthur. 

Rob 



MINER 11: 

Trait Track Sector Byte New Value 



A Bunch of 

APT's 
From France 



First I want to tell you that 1 really like your 
magazine. It brings lots of interesting 
information. So keep up this good work, 

As you can see. your magazine is also famous 
in France. I have, at the moment, an Apple lie, 
two drives, a modem and a mouse. I'm 17 years 
old and like games very much but most of the 
time I'm not patient enough to play till I end 
the game. Here are a few APT'S I found. 

The AFT'S are of course only possible on 
uni<x:kcd softwares (readable with Inspector or 
Disk ftxer). It is also possible that my patches 
won't work because of a difference of version. 
Anyway, I believe they will work on many 
versions. 

CONAN: 

Trait Track Sector Byte New Value 



Her $05 


$09 


$F5 


EA EA EA 


Axes $05 


$0B 


$4E 


EA EA EA 


KARATEKA: 






Tfait Track 


Sector 


Byte 


New Value 


S of > $09 


SB8 


S53 


ss 81 A9 ;a ao bs 


IK 


$08 


m 


nn < IS 


sap 


m 


ISA 


nn < IB 


$12 


$@a 


$4D 


nn < IB 


m 


$07 


$98 


EA EA EA EA 


JK 


SB? 


SC6 


EA EA EA EA 


w 


$07 


sso 


EA EA EA EA 


m 


$87 


w 


nn 



Lives $02 $06 


$E0 


nn 


$02 $01 


$38 


EA EA EA 


Level $02 $06 


$06 


nn < 10 


CONGO BONGO: 






Trait Track Sector 


Byte 


New Value 


Lives $05 $03 


S4E 


nn 



MINER 2B49ER: 

Trait Track Sector Byte New Value 

Lives $02 $07 $58 nn 

THE HEIST: 

Trait Track Sector Byte New Value 

Lives $02 $07 $92 nn 

That's It for the moment. Thanks. 

Re mi Grandjean 
France 



WANTED: 
Silky Sylc expose' 



Is there anyone out there who can do an 
expose on SYLC files. Microsoft uses them in 
their spreadshwt MULTIPLAN. Unfortunately 
very few of any other programs use this file 
format. While MULTIPLAN is friendly, fast 
and can perform complicated logic calculations, 
it won't graph like the Visicaic/Visiploi 
combination. Microsoft indicated some time 
ago that they wanted to have a program to graph 
for the Apple 11 but they only wrote it for the 
Mac. Is there an ca.sy way to convert SYLC 
files to a DIP format, or a program ttiat can read 
SYLC files and plot directly'.' 

Robert Classon 
Mend on. MA 



The Disk Organizer 
Meets The 65C«»2 



Yours is easily (he best magazine on my 
shelf, and I'm going to continue my subscription 
as long as 1 keep my computer, or until you run 
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out of colors for your cover, whichever comes 
first. 

I purchased the 65C02 from your offer, and 
have found one problem you may want to tell 
your readers, they may have had the same: My 
copy of "Disk Organizer 2.0" ftom Sensible 
Software has ceased to work. I have "backups" 
of it, and none of them worked. This is easily 
the best directory editor I have, (it's also the 
only one I have. But anyway.) and 1 wondered 
if any of the other readers had experienced this. 

As for your most wanted list, just about every 
single one of those programs I've seen arourtd, 
cracked by soinebody or another, and the only 
one that 1 haven't (actually, I have, but the 
cracked version didn't work) is Flight Simulator 
n. It will copy with any nibble copier that 
supports manual ^>eed changing (I used EDD, 
copied according to the listed parameters), but 
copying tracks 0-22 manually can be a pain in 
the ASCn. 

Lastly, for you adventurers out there, if the 
hints here aren't enough, there is an excellent 
book written by Kim Schuette, The Book of 
Adventure Games, which has helped me 
through all the adventures I have. It comes 
complete with maps and answers to problems, 
and short reviews. AT $19.99, it's a bit (byte>) 
expensive, but worth it. 

Thanks a lot, and keep up the good work. 

Mike Whistler 
* Del Mar, CA 

Mr Whistler: Shortly after installing a 65C^ 
in our computers, we lu^ced the same problem. 
It occurs because the folks at Sensible Software 
thought they would be tricky and tiAe advaraage 
of the 6502 's bug mentioned on page 20 of 
Hardcore COMPUTfST No. 18. 

To cure the problem search your disk for the 
sequence "A9 m8DFF02AS0A8D0002" 
and replace thejast byte with $03. 



Print Shop 
Printer Problems 



A word of praise and then a couple of 
questions. Your stuff is great, exactly the reason 
I'm a confirmed Hardcore subscriber! 

Question #1: More on DOS 3.3 will be 
gready ^^reciated but please, what mechanism 
causes the stuff on the disk to go where it's 
supposed to? Is it equivalent to entering 
Monitor and typing it in? 

Question #2: I agree with you that PRINT 
SHOP is great but can you tell me how to gM 
it to do its work without an extra line feed after 



each litte of graphics? 

My printer card is a "Parallel Printer Card" 
by Microsystems Engineering of Kokomo, 
Indiana and it is not listed on PRINT SHOP's 
menu. I've tried the Menu software for all of 
the printer cards they list, but none of ihem will 
let me avoid throwing the hard switch in my 
Epson printer and that's not easily done. Can 
you advise me of a more convenient af^roach? 
I'll be grateful. 

Ray Werner 

, .. . _ . Blue Ash, OH 

Mr. Werner: A routine in DOS 3. 3 called the 
file manager is responsible for patting things 
<m a disk where they are supposed to go. I 
suggest you read a book from Quality Software 
(216Q1 Marrilla Street, Chatsworlh, 
CA 91311) entitled ' Beneath Apple DOS. " 

Secondly, several people have written to us 
about incompatibility problems with their 
printer and ' 'The Print Shc^. "Weal Hardcore 
know of no way to alter "The Print Shop" so 
that it will work with other printers. But the idea 
would make a heck of an article. 



A Different 
Wisrardry 



I just got Issue #20 and the Softk^ for 
SARGON m worked great. My Wizardry disk 
was dated 22-Jan-82 . The correct values for the 
boot side are shown below. Sector edit track 
22 sector 04 (die routine is the same as in jlf20 
only the checksums are different). 

A0 00 A£ 28 8B BD 29 8B . 

85 0D 91 02 E8 C8 BD 29 -"' - = '"' 

8B 91 02 85 0E E8 8E 28 -> 

8B 60 00 07 12 B8 07 0F . . 

12 17 09 0F 12 B7 07 12 

12 12 21 K 12 86 07 03 

12 15 09 :-:- 

To get these values I performed die boot code 
trace as in HC #28, page 29. However, please 
note the address values in step #6 should be B6 
A6 & B6 AE. not B9 A6 & B9 AE. Also before 
step tn (6827G) I had to store a 00 in memory 
location B6B6 (i.e. B6B6:WI). For my disk the 
correct values were stored between memory 
locations B6B7">B6CE. 

I repeated the above procedure a second time 
and got a somewhat different set of checksums. 
However, these also seem to work. Afqiarendy 
the checksimis may change slightly due to small 
variations in disk speed. Aldiough I really don't 
know the exact reason for these variations. 



Second set of checksums effective im bdet 
side: 



0C 12 66 07 18 12 18 09 
0D 12 86 07 11 12 12 21 

12 B9 07 0A 12 12 09 



10 



Also I have an Apple //e so to reset I had 
to hit control-reset twice really fast. Oddly 
enough, sometimes I got only the first $10 
values and not the $18 I have shown above, I 
am not sure why but since your article showed 
$18 checksum values I assumed these to be 
correct. 

To copy side 2, i.e. the scenario master side 
I put a jump to B69E in track 1 3 sector E bytes 

08 09 0A, i.e. a 4C 9E B6 [replacing BD 88 
C0j I simply repeated st^s 1 through 7 in die 
article as I previously described, put the 
scenario master in when pronqited, and hit 
control-reset twice when the screen prompted 
insert master/duplicate. Listing fiom ^6B6 
revealed the following new bytes; 

ID 12 4C 09 21 12 EC 07 

So for a side 2 backup I did the following 
track 13 sector 00 starting byte C0 as before 
the routine is as published in HC ^29. 

AE DC 20 BD DD 20 85 0D 

8D 00 20 E8 BD DD 20 80 

01 20 85 0E E8 BE DC 20 

ED E8 C0 60 00 ID 12 4C 

09 21 12 EC 07 

Both sides are COPYAable and both seem 
to work. Many thanks to HCC & TACO 
Van/Eperen for the ground work. I still spent 
several hours on this and I hope it will be helpful 
to their readers. 

J. C.' 
Arlit^ton, VA 



Assorted 
Adventure Tips 



ZORK n 

WELL, that riddle is pretty tuff, isn't it? 

The Dragon just needs a bump on the head 
to get him to follow you, and why not cool him 
down while you're at it? 

Mats can be useful under the door, and if you 
can't get the door open, why not think of it as 
a letter, open it. 

Boy, that Lizard has a sweet tooth! 

Oddly angled rooms seem to remind me of 
"take me out to the ballpark". 
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MINDWHEEL 

That woman's riddle makes mc crow! 

The audience wants a rose, give it to them. 

Choose the disc, and use it wisely, it can cut, 
uidkill! 

The toad has wisdom, and a big mouth! 

■' That door puzzle could take me for eternity! 

You have a GREAT publication! Keep up the 

good work! 

II' -OT : i Ben Youngdahl 



Notes on 
Sensible Speller 
and COMPress 



.u 



I recently got to look at the ProDOS Sensible 
Speller. 1 was able to use the information in 
Hardcore COMPUTIST Issue No. 16 
(Deprotecting Sensible Speller for ProDOS). I 
found that the Checksum routine occurs in 
several places on the diskette. There arc four 
places that the routine can be found. One of die 
places is actually split across two sectors and 
can not be found by looking for the first part 
of die checksum routine. IJust happened to find 
it by accident, while looking for just the last 
part of the routine. I was using Copy II Plus 
as my main copy program. The following is a 
track and sector list of where I found the first 
three routines: 

track sector byte "■ '"' • • ''" 

$0A JC $67 .li- 

$18 (6 $68 '■ - 

HE $4 $68 

The last (HK is split across two tracks starting at: 

track sector byte 
J0f $e $FF 

and continuing to: 

track sector byte ■■.* 

I have found it useM in some cases to chaise 
the third and/or second byte of a multibyte 
instrmction to a NOP ($EA) instruction. This 
hdps in disassembly later. 

On another note, I iMve some software fi?om 
a company called COMPress. It is a mtorial 
series on chemistry. Besides using strange 
address and data headers, which are different 
for some tracks, they also employ an encrypted 
directory and IX>S commands. It has been 
resistance to the usual bit copiers. Copy II Plus, 
EDO, and LockSmith. Prom what I have seen 
so for, the main copy protection is in the first 
three tracks. The DOS is almost normal, except 



for the cncryp««l I>OS commands and die copy 
protection. Can anyone out there give me any 
hints as to where to go from here? 

George S. Mochizula 

! i I - -A..^ ^ J Madera, CA 






Backing up 
Gutenburg 



^1 r 



While I can not help your readers to break 
GUTENBURG, die makers of Copy II Plus 
(ver 3.0) can. This letter is written on a copy 
of flie GUTENBURG master disk created t^ 
Copy n Plus using the built in [wrameters on 
that disk. The only difference I can find between 
the master and die copy is that die Serial number 
has been tost. 

C. G. Ivey, Jr. 
..J A •■: -i. , Salt Lake City, UT 




HC #21: 



DB Master 4 Plus Article; r :^ 

The Sector edit step should say 24 EA's 
instead of 23 EA's 



HC#22: 



'..■ . .-•^•f '■>,! 



The Macro Editor: 

On page 27, a line of source code reading 
"92C3: 02 93 .DA M.V" is missing. 

Super lOB vl.5: 

Lines 340 and 6(90-628 of the Super lOB 
checksums should be shaded. 



-tji-f ,-t*-» 



Most 



Wanted 



List 

Need help 

backlng-up a particularly 

stubborn program? 

Send us the name of the program and [ts 
manufacturer and we'll add it to our Most 
Wanted List, a column (updated each issue) 
whteh helps to keep Hardcore COMPUTIST 
readers informed of the proyama for whteh 
softkeys are MOST needed. Send your 
requests to: 



mfii ' 



Hardcoie COMPUTIST 

Wanted List 

PC Box 110846-K 

Tacoma, WA 98411 



If you know Kow to deprotect 
unlock, or modify 
any of the pwograms below, 
let us know. You'll be helping your fellow 
Hardcore COMPUTIST readers and earning 
MONEY at the same time. Send the 
infonnation to us In article form on a DOS 
3.3 diskette. 






H I »«i " > ' *■ '■ 



Mouse Cak Afifie Computer 

Appk Business Grapbici Apple Computer 

Flight Simuktor Sub Logic 

Factory Suntutst Comunuiucating 

Jane Arlaranics 

Bookends Sensible Soft««ie 

Vldblend Mici«H»* ' 

Snndog FTL Gun^ 

Sundog, V2 FTl, Gunes 

LUenrcr Microlab 

Catalyst Quark, Inc. 

Gutenburg 

Jr. ft S^. Micromolkia LTD 

nine Ptoner Pritnesoft Co(rp. 

Zardax Con^iter Scriutiont 

The Handlers Silicon Valley Syttemi 

MOliken Matb Series (NEW) MiDiken Publishiqg 

The Apple's Core; Parti 1-3 The Professor 

King's Quest Sierra On-line 

Hayes Tennlnal Program Hayes 

Ftin Bunch Unicom 
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readers' lofftkey A copy exchange 

Qlny Harrell softkeys.. Jay O'Donnell sofikeys... Stew Mite's softkey to... 







^cmm Ht^Byte hw. 

1$59 Wabutt, Suite 325 
BotMer, CO 893*2 



Requiranenti: 

Apple //e or lie with 128K (program 

requireiTieiit) 

At least one disk drive '' 

COPYA 

A sector editor ' 

A blank disk 

Oato di&k 






Oato is an e^icellent WWn submarine 
prognunf It plays veiy nicety, and even has a 
built-in fake "spreadsheet" screen so that it 
looks like you're busy with financials -in case 
you're using Gato at work! The protection used 
on Gaio 15 also very good, and it oxild involve 
a lot of time to deprotect because of the subtle 
protection that is deep in the ptograni. 

The Gato DOS lives in the RAM card around 
SD000, but the protection code lives at SB6SA. 
You may run COPYA and copy the original 
disk, and it wiU almost nm... 

The routine at $B6SA does a nibble read on 
track $11, looking for a byte sequence of $AA 
AB. If the sequence b not found, it loads the 
accumulator widi f$0O and pushes it on the 
s&K:k. Hkd the program locks up. But if the 
comet bytes are found, it loads the accumulator 
with M01 and pushes that on die stack. Then 
the program continues happily along. 

So we must find this routine on the disk, and 
change it so that no matter what, it pushes )?$61 
on the stack instead of $00. Using a disk search 
utility, I found the offending code on track $15, 
sector $C, t^te $8C. 

To deprotect Gato, do the following: 

1> Copy the original Gato disk to a Uank disk 
using COPYA with no modiflcations. m' u- 

2) RUN your favorite sector editor and mflke 
the following byte changes to your COPYA 
copy of Galo: 

"frach Si e tor Byta fr m "jii ^ ^ 

foill *C S8C tAO IA9 . ._; 
•^tm^ *^K, tSD $E9 m -^ 
-^riW^r^^lC tSE $C0 SD0 
-m fC $8F JA9 $67 

3) Write Ifae sector back ow to your COPYA 
copy of Gato. 

Tiiis code will load the accumulator with 
^'$01 and then branch to the end of the routine. 
This is die best (and safest way) to disable die 
protection. And you're ail done! 




MicroLab, Inc. 
2699 Skokie Valley Road 
Highland Park. IL 69935 



Requirements: 

4SK Apple j( 
Blank disk 
Dino Eggs Disk 
Super IOBvl.5 

Dino Eggs was reviewed nicely by Ray 
I>arrah in Haidcore COMPUTIST no. 18, so 
I won't bother with decribing the game here. 
Inspection of the address and data epilogues 
revealed that they had been altered. Copying 
the disk with Super I OB was no problem from 
there, but the disk would not run. There were 
several locatimis in the DOS that checked for 
these markers. You could attempt to search for 
and change all these places, but in the case of 
this game, two changes will do. Both tell the 
checking routines (one in DOS, one in a 
normally empty location in DOS) to ignore the 
epilogue and other errors. 

Install the controller here into Super lOB 
vl.5 and copy die Dino Eggs disk. It uses the 
Fast routine in versitm 1. 5. You now have a 
COPYA-able version of Dino Eggs. 

CMitroHer 

10W REM DINO EGGS CONTROLLER 
lflBTK-«:LT«35:ST = 15:LS-15:CO«lR:FAST 

= 1 
1020 GOSUB 494 : FESTORE : GOSUB 170 ; GOSUB 610 

: GOSUB 310 
1030 GOSUB 490 : GOS4JB230 : GOSUB 610 : IF PEEK 

(TRK ) = LT TXEN 1050 
19*0 TK => PEEK (TRK ): ST =. PEEK (SCT ) : GOTO 1020 
1050 HOME : PRIHT "COPYDONE- : END 
5000 DATA 158 ,231 ,213 ,170 
5010 DATA 2'CHANGES 
5020 DATA ,9 ,66 ,24 
5030 DATA .11 ,117 ,24 



controller checksums 



10M - I3S6B 

»II ' $2544 

ll2fl - tB960 

1038 - SE89B 

1040 - tFECX 



1050 - $E9FS 

5H0 - $0707 

5010 - S3BF4 

5020 - 12253 

5030 - «B300 



Pinball 
Construction Set 



:':|- 



Elearonic Arts 

2755 Campus Dr. 

San Mateo. CA 94493 

$39.95 



Requiraneiits: ^^ ^ ^ 

Apple ][ Plus or lie , 

Copy program such as Locksmith 5.6 
Disk sector editing pipgram 

Pinball Constructioo Set is a fascinating 
program that allows you to construct and play 
your own pinball madiines. You control sound, 
scoring, colors, gravity, bounce, and all other 
aspects of the game. 'Hie complexity of your 
control is such that the game has even been 
referred to as a low level programming 
language. Unfortunately, backing up this 
program can be quite a problem. Aldiou^ 
parameters are available for Nibbles Away II, 
Locksmith 5.0, Essential Data Duplicator, and 
other copy programs, several different 
proiectkin scbnnes have been anfAayed during 
different releases of this game. I found that none 
of die parameters would give me a working 
copy. The technique described here not only 
gave me a working copy , but resulted in a cwy 
that is COPYA-able. - - - -.^n_. 

1) Make a copy of the entife disk. Locksmilh 
5.0 Fastcopy works just fine. You can use 
Nibbles Away 11, Essential Data I>upHcator or 
Copy n Plus, employing just the normal defiudt 
parameters, if you wish. The important thing 
is to ignore any errors you get on track 6. 
COPYA win not work. It dies due to an I/O 
emH- on that tr^k. 

2) Using a disk sector editing program, read 
track 3, sector 6 on your copy. I used ZAP from 
Bag of Tricks, but any ^tor with similar 
capabilities will do. Look for the pattern A001 
20 CF 17 20 D9 IE. This pattern occurs only 
once in this sector, and is found b the last half. 
If you are using ZAP, the offeet is +92, This 
code disassembles as follows: 



LDY #101 
JSR I17CF 
JSR tlED9 

3) Change the $A0 to $60 (an RTS in machine 
language) and write the modified sector back 
to the disk. :;i 

That's it. You now have a COPYA version 
of Piobalt Construction Set. 
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readers' sofftkey & copy exchange 



Ken Black's softkey for... 



T A C 

Tactical Armored 
Command 



Avalon Hill Microcomputer Games 

4517 Harford M. 

Baltimore, MD 21214 

Requirements: 

48K Apple 1[ 

Super lOB vl.5 

TAC disk 

An initialized DOS 3.3 disk 

TAC (Tactical Armoured Command) is one of 
those irritating programs that is hard to get a 
good bit copy back-up. I found out it's easier 
to deprotect (softkey) it than to make a bit- 
copied backup. This procedure is easily and 
quickly done with Super lOB's New Swap 
controller. 

The procedure is pretty straightforward but 
will require some changes to make it work 
properly. Not only were epilogues and sync 
bytes on the disk changed, but the Applesoft 
programs on it were written with altered DOS 
commands. Rather than change the programs, 
it is easier (and less time consuming) to copy 
the altered commands to DOS 3.3. This can be 
done by copying track I , sector 7 to the new 
disk. 

This is how to do it: 



1) Turn on your computer and press Reset, 

2) Enter the monitor and move the boot code 
into RAM. 

CALL -151 

«>6M<C6ee.c6FrM 

3) Alter the re-located boot code to jump into 
the monitor after the RWTS is loaded in, 

96F8:A9 99 8D 4A 08 4C 91 98 

4) Boot up the TAC disk partially. 
96«eG 

5) You should be in the monitor with the disk 
sti!) spinning. Move the TAC RWTS to a safe 
location. 

6e»e<B8»«.BFFFM 

6) Boot normal DOS 3.3 with a small or no 
HELLO program and BSA VE the TAC RWTS. 

BSAVE RWTS.TAC,A$6»»e,L$8WI 

7) If you haven't already done so, INTT a blank 
disk with DOS 3.3. 

INIT HELLO 

8) Install the controller following this softkey 
into Super lOB v 1 .5 and copy TAC onto your 
freshly INITialized disk (don't format). 

9) Have fun with your backup copy. 

If you really wanted to, you could use a 
totally normal DOS or even a high-speed DOS 
and change the commands "FIXDOSFL", 
"GETIT", and "KEPIT" found in the 
Applesoft programs to MAXFILES, BLOAD, 
and BSAVE. respectively. In this case, do NOT 
copy TAG'S track 1, sector 7 to the new disk. 



controller 




1008 REM TAC CONTROLLER FOR S- 1 OB Vl.5 
1005TK = 1 :ST = 7:CD=V/R:GOSUB490:GOSUB360 
1006 GOSUB 430 : GOSUB100 : GOSUB490 : GOSUB360 

: GOSUe 100 
1010TK = 3 :LT = 35:ST=15 ;LS=15 :CD=WR:FAST 

= 1 
1020 GOSUB 360 ; GOSUB 490 : GOSUB 610 
1030 GOSUB 360 ; GOSUB 490 : GOSUB 610 : IF PEEK 

(TRK ) =LTTHEN 1050 
1040TK = PEEK{TRK) :ST = PEEK (SCT) : GOTO 1020 
1050 HOME : PRINT "DONE" : END 
10010 PRINT CHRS (4 ) "BLOAD'R»n"S.TAC,AS1900" 

controller checksums 

1000 - S3568 1030 - $0A0B 

1005 - $8068 1040 - J3EA4 

1006 - $0580 1050 - $0FA5 
1010 - $0502 10010 - $2BFA 
1020 - $389F 



Greg Schroeder's softkey for. 



The Print Shop: 

Graphics Library 



Broderband Software 

J 7 Paul Drive 

San Rafael. CA 94903 

$49.95 



Requirements: 

Apple ][ 
Super lOB vl.2 

After reading the Tutorial For Disk 
Inspection in Hardcore 16, 1 decided to attempt 
to write a controller for the Graphics Library 
disk for Print Shop. The disk is in standard 
format for tracks $l-$22 and can be copied 
normally. On track sectors $0-SF the data 
field epilog bytes have been changed to DE A9 
instead of the normal DE AA. I attempted to 
use line 1024 of the super controller (in the 
tutorial) to normalize this track but my 
controller didn't work, so I used line 1028 to 
ignore the epilogs instead. This is the routine 
that was dropped when Sujjer lOB was updated 
in Hardcore 14. 1 find this routine very useful 
and am glad it was included in the Super 
Controller. I was even more impressed with it 
when 1 used it on side two of the Graphics 
Library disk and copied it, even though each 
side used a different protection method. I hope 
this softkey is some help to you. 
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readers' sofftkey & copy exchange 



fe- 






'■m. 



Controller 



ISeS REM GRAPHICS LIBRARY CONTROLLER BY 

GREG SCHROEDER. 
1018TK = 9:ST = :LT.35 :CO = l#R 
im Tl = TK : GOSUB 490 
1B28 POKE 47405 ,24 : POKE 47406 ,96 : POKE 47497 

,24: POKE 47498 ,96 '"^^ 

1030 GOSUB 430 : GOSUB 1»0:ST«ST + 1: IFST< 

DOS THEN 1030 
1040 I F6F THEN 1060 
1050 ST = :TK = TK + 1 
1060 GOSUB 490 :TK»Ti 
1069 POKE 47405 ,208 



IF TK<LT THEN 1030 
■.ST = 

POKE 47406 , 19 : POKE 
47497 ,208; POKE 47498 ,183 
1B70GOSUB430: GOSUB 100 :ST«ST + 1: IFST< 

DOS THEN 1070 
1080 ST = a :TK=TK+ 1 : IFBf =0ANOTK<LTTI€N 

1070 
1090 IFTK<LTTHEN1020 
1100 HOME : PRINT "DONEHIITH'COPY" : END 



Controller Cbeckstints 






1000 - t356B 

1010 - $3266 

1020 - fCUA 

1028 - J4D7F 

1030 - t5B7E 

1040 - $C1A5 

1050 - $8FF0 



1060 ' $93DC 

1069 - t735F 

1070 - $7B5A 
1080 - $F3CF._. 

1090 - $7A41V. 

1100 - $7692' ■•* ^ ; 



Nick Galbreatk's sojikey for,.. 



Death In The 
Caribbean 



t'^t 



Micro Lab 

2699 Skokie Valley M. 

Highland Park, IL 60035 

$35.@0 



Requirements: 
Apple ][ 
Super FOB vl.2 
Two blank disk sides 



r.*> 



Death in the Caribbean Is a beautiful graphic 
adventure game; however, like many adventure 
games (or just in general) it is protected. Its 
protection involves a drastic changing of header 
and epilog bytes on tracks $l-$22 and reset 
plugs. Amazingly enough, Micro-Fun forgot to 
plug Control-C! So the first part of our softkey 
would be to get the RWTS routine by breaking 
into BASIC. Do so by following these 
instructions: 




1) B oot up your copy while holding down 
BCI. 

2) When you break into BASIC, enter the 
monitor by typing 

CALL-151 nvtK^ru:.! 

3) Move the RWTS routine into "safe" 
memory by typing 

6gM<B8W.BFFFM 

4) Boot up a slave disk. 

5) Save the RWTS routine with 

BSAVE RWTS.DIC,A$68«,L$«8M 

Run Super lOB with the swap controller 
listed at the end of this article installed. Copy 
both sides of Death in die Caribbean. The 
controller copies track as is, then beginning 
with track 1 starts swapping the RWTS in and 
out until done. During the copy procedure, 
Super JOB changes track 0, sectors 2 and 3 as 
in the following table: 



controller 



1000 REM DEATH IN THE CARIBBEAN 
1010TK»0:ST = 0:LT=35:CO = I»R 
1820T1=TK:GOSUB490: IFTK>0THENGOaJB360 
1030 G0SU8 430 : GOSUB 100 ;ST«ST + 1 : IFSI< 

DOS THEN 1030 
1040 I F BF THEN RESTORE : GOSUB 310 : GOTO 1060 
1050ST-0:TK = TK + 1 ; ON (TK m l ) GCSU8 36« : 

IF TK<LT THEN 1030 \ 

1060 GOaiB 490 : TK = Tl :ST . : GOSUB 360 ;-• J 
1070 GOSUB 430 ■ GOSUB 100 :ST s ST + 1 : IF ST < 

DOS THEN 1070 
1080ST = 0:TK=TK+1: IFK^s0AHDTK<LTTHEH 

1090 I F TK < LT THEN 1020 • Y ^''^X^W 
1100 HOME : PRINT "COPYOONE!" : &«'^ f^C-.^ 
5000 DATA 10XHANGES .0 ,2 ,231 ,213 -«■ <^^* 



Track Sector Byte 



S00 
100 
$00 
$00 
100 
$00 
$00 
$00 
$00 
$00 



$02 
$02 
$02 
$03 
$03 
$03 
$03 
$03 
$03 
$03 



$E7 


$96 


$F1 


$D3 


$FC 


$E5 


$35 


$96 


$3F 


$FF 


$55 


$D3 


$5F 


$96 


$6A 


$F2 


$91 


$03 


$9B 


$B2 



From To ,_ 

$D5 -'-'-ii 
$AA«S.iK»* 
$96 41 -Jdi 

$DE :?)«| 

$AA <| 



5001 DATA ,2 ,241 ,170 
5002OATA0 ,2 ,252 ,173 

5003 DATA ,3 ,53 ,222 

5004 DATA 0.3 ,63 ,170 
S00SDATA0 ,3 ,85 ,213 
5006DATA0 ,3 ,95 ,170 
5007 DATA ,3 ,106 ,150 
5008 DATA 0,3 ,145 ,222 
5009OATA0.3 ,155 ,170 
10010 









a I F PEEK (6400 ) <> 162 THEN PRINfT CHM^ 
) "BLOAO'fflfTS.DIC,A$190fl" "" ■?-■■■' • ■*^««. 



Ctmtroller Cbecksunu 



Death in tfie Caribbean is finally (at last!) 
cracked. Enjoy! 



1000 - $3S6B 5000 - $9B4F 

1010 - $3266 5001 - $2285 

1020 - $2060 5002 - $1A1B 

^■^■Am . 5003 - $1F5A 

'-'mn "50M -$2770 



':'f 
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by Todd C. Wilson 



Choplifter .,,,^^ 

Broderbund Software' - " 

] 7 Pout Drive 

Sm Rafael. CA 94903 

$34.95 


r.-:s6-.-. ■• 
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Requirements: 
48K Apple 1[ 
DOS 3.3 
1 Blank disk 
Choplifter disk 

Flying low along the ground to avoid the 
satellites, I spotted a group of people. 
Landing quickly, 1 helped them inside. 
Rumbling over the plains came a squadron 
of tanks. Suddenly a jet fired its missies at 
me. Time to go. Jerking up on the control 
stick, I sent the chopper skyward. Just missed 
mel Whoops! Satellites are coming in, too 
low to dodge. Firing at one, I backed up and 
crashed into the other. Blast! The chopper 
lost control and spun down to crash into the 
desert. Ten people lost. Next chopper, 
please. 1 am, of course, playing Choplifter. 
The only difference is that the one I'm 
playing is deprotected. 

According to the electronic grapevine. 



Choplifter is so heavily protected that even 
a c(^y card has a hard time copying it. EDD 
m can copy the entire disk, but the booting 
time is twice as long and has a tendency to 
fail. 

Being a software "purist", I tend to shy 
away from copy -cards, due to the fact that 
I am too cheap to buy one and that none of 
them wotk on an Apple lie. And for a matter 
of fact, neither does Choplifter. Snarl, snari! 

But that is all in the past. Choplifter is 
about to join the ranks of deprotect^ 
software. If you wish to skip the main bulk 
of this article and get right to the softkey, 
be my guest. You can always read this later. 

How Broderbund Protected Choplifter 

When the disk controller card loads in and 
runs track $00, seaor $00, the code copies itself 
from $880 to $200 - which is also the location 
of the keyboard buffer! It then messes around 
with the data in $S{K9, and loads the second 
sector into $300 and transfers execution to $301. 
$301 to $328 builds a RTS table and some code 
in $100 to SIFF (the stack), and then goes to 
$131 through a jump via RTS' code. $131 to 
$tFF does many, many things. First it clears 
text page 1 & 2, and copies ROM Basic into 
the language card, if one is present. Then the 
BRK & reset vectors are set to the disk 
controller card. $188 to $18F is a very good 
piece of misdirecdon. It seems to call a routine 
at $190 and then exit via a RTS to $405. But 
it EXJESNT! That code is just there to fool you. 



At $190 it loads in 4 pages of code into $400 
to $7FF - text page #1. This is Standard 
Operating Procedure. This is done so that, if 
you stop the program, the screen and the code 
wilt be erased by whatever you type. The code 
is read in from the disk by the conunon 4x4 
fbimat (See: Quali^ Softwares beneath APPLE 
DOS, pages 3-13 to 3-21 on Ehita Field 
Encoding). Not only is diis fast as heck, many 
other DOSs use this - Atari, Commodore, etc. 

Transfer is then given to $4 A3 from $1FB 
to $1FF, agam by a RTS. This code starts out 
by copying $500 to $5FF into $200 to $2FF 
(notice the keyboard buffer use again) and $600 
to $6EF into $300 to $3EF. It then resets the 
character hooks ($36, $37) and keyboard hocdcs 
($38.$39) to $326, which zaps the memory and 
reboots if anything is printed or the keyboard 
is read. Then it appears to clear out $C00 to 
$0000, but it doesn't - it clears cut $C0e to 
$C7F, then $D80, $£81, $F82, ect., on up to 
$C000. It seems Broderbund made a mistake. 
The opcode at $4F2 should be a BNE instead 
of a BPL. 

In any case, control is transferred by some 
nifty code to $440. At $440, the hi-res screens 
are cleared out, and the title page is loaded up, 
plus some code at $6000 to $63FF. By using 
an in-line DECrcment memory opcode, control 
is given to $400, not $700 as it appears. $400 
gobbles up the stack, and loads some more code 
into $500. By this time, $200 and $201 hold 
the value of $6300, which is the next piece of 
code to be run. Onward! 

The code at $6300 could have been left out. 



« 
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and I would have been happy . The only reason 
for this code is to check for an .^iple ][,][+. 
or //e Monitor ROM. 

This is what got me mad in die first place! 
Ibis code is re;sp<»>sible for Chopltfter not 
bootiiig on a //c. The //c's ROM doesn't match 
with any of the "known" ROMs. Result: Re- 
boot and try again. 

When 0K above rtxitine exits, the new code 
tt $500 is run. This code is the best piece of 
protet^on ever concocted! ^ using the fast 4 
X 4 format, the code makes some in-line mods 
and THEN runs them. The result is quite 
different than that expected. Control is given 
to S44M, i^iich does 3 inanictioiis, then goes 
to $566. 

At last! This is the code that loads in tiie nuin 
program. The program is loaded into 
$gM-$lFPr, and then into $6eee-$BFFF. 
Control is given U) $6BF, which loads in the 
necessary zero-page values, then checks the 
game for errors. If the cbecksiuns match. 



control is given to $800 - and Choplilter is run! 
(Wliew!) 

The Softkey 

Tlie loftkcy is the result of 8 hours worth of 
work; writing what is known to the trade as a 
t^wworm. A tapeworm is simply a program 
that can insert itself into ancrther program, 
roooitor and/or slop it when it gets so far. This 
is exactly what the softkey does. It boots the 
disk, then loads in the second seaor, copies it 
to $3WM. modifies it, runs it. etc. When the 
tapeworm gets so Ibr, it re^it^es itself, finishes 
its work, copies the zero page to SlPflO, and 
then - dies. Its work is done, and thus it 
commits suicide so that we may gain from it. 

The tapeworm was built by moving the disk 
controller card into $B600-$B6FF, and then 
modifying it to enter the Monitor instead of 
$801 . Then, by using some code, a printer, lots 
and lots of paper, logic, more code, and just 
plain luck, the boot code was traced. By 



Choplifter A.P.T. Control Keys 

BAI -change the X-axis of the joystick 

BVi -change the Y-axis of the joystick ,j,^, 

BRI -reset the game to demo itKxle 

fetft -toggle unlimited choppers option 

BLi -plus I number: change playing level (0 to 3) 

i gp i -plus 2 numbers: change the number of seats in your chopper to the 2-digit number 
(00 to 64. 64 and up will give you the maximum amount of teats) , , , 



?«»r*- !■ 



copying parts of the code and feeding it to the 
tapeworm, it grew large enough to handle 
everything the protection threw at it. 

When the Monitor bell rings and the drive 
stops, we have ui mcinoiy a copy of Choplifter 
($800 to SIEFF and $6000 to $BFFF> and the 
zero-page values at $1F00 to $1ITF. Here's 
how to get all of Choplifter: 

1) Boot a DOS 3.3 disk, INTT a tbve disk with 

a blank HELLO file, and delete it. 

INIT HELLO 
DELETE HELLO 

2) Type in the TAPEWORM, FKUP, and 
MOVER hexdumps listed (listings iCl , Jl'2, and 

#3). Save as follows: 

BSAVE TAPEWORM,A$2M«.L$149 
BSAVE FIXUP,A$1I»I,L$A9 
BSAVE MOVER,A$200t,L$4C 

3) Load the t^eworm program 
BLOAO TAPEWORM 

4) Insert your Choplifter disk into drive 1 , slot 
6 and start the tapeworm on it's journey through 
Cboplifler's intestines. 

CALL 8192 

5) When die Monitor beeps (if the cursor looks 
funny, ignore it>, check and make sure that no 
errors have occurred: 

2M»<4Mt.5FFFV 

You should get no coding listed. If you do, 
or the Monitor will not accept your input, 
reboot the slave disk and go back tt> step 3. 
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Sometimes, for unknown reasons, the 
tapewonn will not woric. This is shown by 
garbage on the hi-res screen. If this happens, 
go back to step 3. 

6) If everything seems fine, oner the fbUowtm: 

«DAB:2« 91 ID 
2IW<8M.8FFM 
21M<6Nt.BFFFM 

This step patches the program so the Mover 
and APT programs will work and save page 8 
ftom the reboot. The last command moves the 
code from $6000 to $0000 down to $2100. 

7) Insert your slave disk, and enter: 

C6WG 

CALL-151 

8N<2tH.2«FFM 

3MG 

BLOAD nXUP,A$lD91 

BLOAD MOVER,A$2»M 

BSAVE CHOPLIFTER,A$«H,L$790« 

That's it! OtOfdifter is now a BRUNaMe file. 
Just to make sure, the file length of the file 
should be 123 (that's the 3-dJgit number just 
left of the filename when you CATALOG a 
disk). 

The MOVER 

The MOVER program sets the reset vector 
to the Monitor, and then moves the code fkmi 
$2100 to S80FF into $6000 to $BFFF, but it 
does it backwards. Starting with the code at 
$8000, it moves it to $BFOO, dien $7F0O to 
$BEO0, etc. It then fixes the program so that 
an 800G from the Monitor will restart die game. 

TheFKUP 

The FIXUP program takes care of the one 
thing thai Chopliftcr cannot do: redraw the 
screen. First it wipes the top 2 lines of hi-res 
page 1 and page 2 to black, and then redraws 
the ground at the bottom. Then it copies the 
saved zero page from $1F00, and calls $90(2) , 
which redraws the scoring block. The last line 
euts lo $12C1, which displays hi-res page 1. 



And Some A.P.T.s 



i^jff 



The patchat $DAB calls the APT package. 
Pressing OO will toggle the Unlimited 
Cho[^r5 option. It will also reset you to the 
first chopper. Pressing ElPl and then two (2) 
numbers willch ange die amount of seats in your 
choRjer^pB 01 will make a very hard game, 
while IBPI 66 will make a very easy game. 

Pressing ERI will restart the program, by 
re-eiuering the demo mod e. 

Also, by pressing SLi and then a number 
from to 3, you select the level you wish to 
play on. This is not part of the package, but 
was left in by the original authOT. This is use^le 
from either the demo or during play. 



1. hexdump for. . 



zm 

2M8 
2010 
2018 
2020 
2028 
2030 
2038 
2040 
2048 

2BM 

2058 

20(0 
20«8 
2070 
2078 

2080 
2068 
2090 
2098 

20A0: 
20A8; 
20B0: 
20B8: 
20C0: 
20C8: 
2001: 
2008: 
20E0: 
20E8: 

20F0 
20F8 
2100 
2108 
2110 
2118 
2120 
2128 

zm 
2ua 



the TAPEWORM 



A0 
CS 
D6 
00 
00 
A0 
C9 
SA 
84 
A6 

A2 
£8 

80 
03 
80 
4C 
FB 
B7 
AE 
01 



00 B9 

00 F7 
B9 10 
Fl 4C 

08 90 
AB 98 
FF D0 
99 00 

3D 84 

25 20 

0« K> 

00 F7 

10 03 
A9 4C 

26 03 

01 03 
01 A9 
80 FD 

son 

A9 05 



00 C6 99 
89 ID 20 
21 99 F8 
00 B£ A2 
00 02 ES 
85 3C 4A 
09 C0O5 
I8I8C8 
26 A9 03 
50 02 20 



00 B6 
99 F8 
B7 C8 
00 BO 
00 F7 
05 3C 
F0 05 

00 EA 
85 27 

01 02 



00 03 
A9 30 

80 16 
80 25 
A9 67 
68 68 
6A80 

01 4C 
01 A9 
80 FD 



05 9A 

04 A9 
80 23 
4C A3 
FE A2 
A2 FF 
37 05 

05 C9 
C9 05 
CF B7 



68 68 A9 
96 80 22 
04 A9 60 
04 20 93 
00 8A 46 
9A A6 2B 
C9 DOD0 
F5 00 F5 
D0F5 20 
20 30 05 



90 00 30 
8OtA03 
03 80 IC 

03 A9 56 
80 27 03 
A9 4C 80 
FC 01 A9 
31 01 A9 
65 BO FC 
01 AE 65 

4C 80 21 

04 A9 B7 
80 EO04 
FE 20 89 
CA 00 FC 
A9 FF 20 
F7 20 39 
20 39 05 
30 05 80 
80 00 67 



30 05 80 
EAA2 43 

05CA10 
FF 20 F6 
20 F8 06 
F8 06C9 
06 8OE3 
E4 05 20 
C9 £AD0 
ttC0A2 



FF FF 
B0E3 
F7 4C 
06 C9 
C9 FF 
05 00 
05 20 
EF 06 
EA AO 
MBO 



C$EA 
B7 90 
73 05 

05 00 
00 F6 
FS 20 
EF 06 
80 FF 
82 C0 



— -<*^i*p««sr- 



tE230 
$8A7F 
tB0OA 
J703F 
}EB85 
$5052 
$E5F0 
S9FFB 
$16C8 
S4039 

18561 
SEABl 
$9C55 
$E(»B 
$20E6 
IIEIB 
I53F2 
$C0B9 
15584 

mzF 

S7759 
$328F 
$17B6 
SE64B 
$8eC4 
t2DB8 
$F4«3 
t3E93 
t770B 
18939 

I8A56 

t5F57 
$2037 

$69EF 
$1706 
$83A8 
$EA07 
$A4A5 
$8E26 
W772 



2140: 90 00 IF CA 00 F7 4C 59 $SCFC 
2148: FF IBBti 

2. hexdump fifr... 

the FIXUP 



1D91: 4C 
1D98: 99 
1DA0: 40 
IDAS: 19 
1060: BO 
1068: 29 
1OC0: 26 
l«£: E0 
1DD0: E8 
1000: 21 



1DE8 
1OF0 

1DF8 
1E00 
1E08 
1E10 
1E18 
1E20 
1E28 



12 
4C 
67 
00 
C9 
00 
0F 
10 
00 
0F 



El 10 A0 
00 20 99 
99 00 44 
80 02 IC 
02 IC 85 
A0 27 A9 
91 28 88 
A2 00 BO 
O0F8 A9 
90 A9 00 

2C 10 00 
00 08 C9 
06 49 40 

80 IC 73 
90 F0 01 
00 10 FB 
AS A9 F6 
FA 80 01 
00 10 FB 
18 60 01 



27 A9 
00 24 
88 10 
85 26 
27 49 
55 49 
10 F7 
00 IF 
FF 85 
85 79 

C9 92 
95 00 

80 87 
68 68 
60 98 
2C 10 
18 69 
60 68 
2C 10 
60 80 



00 

99 00 
Fl A2 
85 28 
60 85 
7F 91 
CA 10 
95 00 
79 20 
4CC1 

00 03 
11 AO 
06 A9 

18 60 
48 AD 
(X 29 
0A 88 
AS AD 
C0 29 

01 60 




2000: AO 

2008: 00 

2010: F2 

2018: AS 

2020: 84 

2026: 85 

2030: CB 

2038: 00 

2040: 94 

2048; 06 



?■..•, 



00 C0 
03 4C 
03 A9 
80 F4 

02 A9 

03 A2 
00 F9 
F2 A9 
80 01 
4C 00 



2C 10 CS 

59 FF A9 
FF80F3 
03 A0 00 
80 85 01 

60 61 00 
C6 01 C6 
20 80 00 
08 A9 ID 
08 



C9 9B 
59 80 
03 49 
84 00 
A9 8F 
91 02 
03 CA 
08 A9 
80 02 



$9002 
$F2E4 
$4B28 
$314A 
$0730 
$90E7 
$6A96 
$^10 

$irao 

$85CE 

$0B31 
$29F 

$547B 

$B47A 
$3409 
S9464 
S8333 
$4320 
$5350 
$CA09 



1E30: 80 7C 61 80 A8 61 68 68 $4A9B 
1E38: 18 60 $88A7 

..5V.">««i «,■- 

3. hexdump for. . . 

the MOVER 



$7FBe 
$3004 

$C«7C 
$04C4 
$9E49 
$749C 

$F58A 
$1087 
$66EF 
$8AF9 



■m 
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lUliffplot 





just use the Super lOB's Swap Controller and a 
modified Mufplot RWTS to soflkey this useful 
program. Mufplot is designed to help ham radio 
operators to predict optimujn operating 
frequencies. 
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by Edward £. Harte, M.D. 



Sase(2) Systems 






tr.^ .'^ i^^^j^- '^pti 



Requlronents: 

Mufplot disk 

Super lOB vl.2 

A way into the Monitor 

A Blank Disk 



The program Mufplot by Base (2) Systems 
is designed to aid ham radio operators in 
predicting optimum (grating frequencies. It is 
a very useful program, the only drawback was 
the copy protection. The first copy of the 
program I used self-destructed after six months 
use, forcing another cash expetiditure to replace 
it. This motivated me to de-protect the {nogram. 

Upon examining the disk I found the 
following protection schemes. 

One, the address and data epilogs have been 
changed to FF FF. The program used normal 
DOS address and data headers, but with an 
interesting twist. Prior to the nonnal DOS 
header of D5 AA 96 is a pseudo header of DS 
AA BF. This header apparently would mislead 
a nibble copy program, such as Copy II Plus. 

The second protection scheme became 
apparent when I changed a normal DOS to 
account for the changed address and data 
epilogues. Even though the address and data 
marks were ok, cataloging the disk resulted in 
an I/O error. It turned out that a checl^um error 



was occurrmg. 

As noted in the CIA files, a likely cause for 
checksum erroi^ is a change in the byte 
translation tables. I booted up Mufplot and 
entered the monitor via my Wildcard II. A peek 
at the byte translation tables revealed die 
following changes. Memory location $BA29 
had AA instead of 96 and SBAAA had 00 
instead of AA. A quick insertion of the byte 
table changes, along with the above epilogue 
changes allowed inspection of the nonnal 
catalog. Needless to say, I felt like the explorer 
who found a treasure. 

The technique to copy the disk presented here 
does not require utilization of the above 
information, but I included it to hopefully 
expand others' knowledge in cracking disk 
protection. To break the protection we will 
utilize the Swap Controller of Super lOB, This 
will allow us to use the iiKxlified Mufplot 
RWTS to read the disk and write to another disk 
with a normal RWTS. 



The Technique 






1) Boot a normal DOS disk. 

2) Initialize a destination disk. 

3) Boot the Mufplot disk. ' "; 

4) At die menu stage, enter the monitor Iqf 
whatever means. 

5> Move the modified RWTS to a safe location. 
19M<B8M.BFFFIVf , .. ^ , 

6) Boot up a slave disk. 

7) Save die RWTS to your Super lOB disk. 



BSAVE RWrS.MUFPL0T,A$19»,L$»l 

8) Install the controller inw Super lOB and run 
it. Do not use the format (^on. 

9) Enjoy! """' 

controller 

1W0 l£M liUFPLOT CONTnOlLER 

1010TK-3:ST«fl:LT«35:CO = lffi 

1020 TU TK : GOSUB 490 : GOSUB 360 : ONERRGOTO 

550 
1030 GOSUB 430 : GOSlffl 100 :ST - ST + 1 : IF ST< 

DOS THEN 1030 
1040 tFBFTl€Ni060 

1050 ST = :TK = TK + 1 : IFTK < LT THEN 1030 
1060 GOSUB 490 :TK = Tl :ST»0:GOSUe 360 " 
1B70 GOSUB 430 : GOSUB 100 :ST - ST + 1 ; IF ST < 

DOS THEN 1070 
1080ST.0:TKsTK+l : IFBF«fl«iDTK<LTTHEH 

1070 ::':ir 

1099IFTK<LTT1£N1BZ0 ~ 

1100 HOME : PR I fr 'COPY* OK ,' NO' DOS* OK* COPY" 

:END 
10000 REM CONFIGURATION TIME 
10010 PRINT CHR$ (4); "BLOAD'RHTS.MUFPlflT, 

AI19M" ■«- 

controUer checksums 



2077 


- $0255 


1070 


- »AF1B 


1010 


-SEBSE 


1080 


- $B299 


1020 


- izAoe 


1090 


- JF6B4 


1030 


- $3C09 


1100 


- IE2A5 


I 1041 


- $€49C 


Tnutaa 

iDvvV 


- $8EF6 


"t 1050 


- I3CF3 


10010 


- $8344 


■-^ mi 


-*:wm- 


: 
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IIIFIashcalc 



Flashcalc is one of the first products from Paladin (aka Visicoip) since the 

r • Software Arts - Visicorp lawsuit. This is not Visicalc, but it does have most 

' ^'' all of the features plus full support for most 80 column cards. It is written 

. 1 by the same folks who wrote Magic Office System (distributed by Artsci, 

. , , Inc.) . Flashcalc is a ProDOS based program, and can serve as an introduction 

to ProDOS copy protection. . ,r . 



by Doni G. Grande 



jli 



Paladin (i^icorp-Paiadm) ^^ 

San Jose, CA 95134 
$99.00 



«... wr^;;^ 
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Requirements: 

FlashCalc 

COPYA 

Any sector editor 






Like many ProDOS programs, Flashcalc 
allows you to place it onto a hard disk, This 
means that Flashcalc must use ProDOS for most 
of its disk access, and pnAabty checks the disk 
only when it is loading to insure an original disk 
is in the drive. Also, the protection scheme is 
probably either a nibble-counting type or a 
signature checking type. This is also supported 
by the fact that the original is COPYAabie, but 
that the copy wUI not run. 

To try to find the protection code, you must 
have a place to start lookipg. There are two 
possibilities: (1) ProDOS itself has been 
changed or (2) the startup code does the 
protection check. There is a simple way to 
check for #h 



1) Boot a standard ProDOS disk and get into 
Basic. 

2) CATALOG the protected disk. You will 
probably be able to do this if a mostly standard 
ProDOS hu been used. ..... 

. - 'i. 

3) Type FM i .-"CS^ 
PR£FIX,D1 

to set the ProDOS prefix to that of the protected 
disk. 

4) Now run the 1st "xxx.SYSTEM" file in die 
catalog by typing 

-XXX.SYSTEM ' 

If the program starts executing using diis 
procedure, then you have a standard ProDOS 
and the program must be doing its own copy 
protection dirty work. The secret here is that 
ProDOS always runs die first file widi the name 
"XM.SYSTEM" when a disk is booted. By 
following the above steps, you have booted the 
original disk using the version of ProDOS in 
memory! 

If you have come this fta, then the protection 
code is buried in 6k program itself somewhere. 
So now you must try to catch the program 
executing the copy protection. When a COPYA 
Flashcalc is booted, ProDOS gets loaded and 
then it almost immediately re-boots the disk. 
This means that the protection scheme is very 
early in the boot process. The first place to look 
is in the "xxx. SYSTEM" file mentioned above 
(FC.SYSTEM on the Flashcalc disk). This can 



be done by placing the protected disk in the 
drive and typing 

BLOAD FC.SYSTEM,A$2»M,TSYS 



Note that xxx. SYSTEM files always load in 


memory 


at locadon $2000, and they are of type 


SYS. Now, lets look and see wh^ Flashcalc 


does upon booting. 




Enter the monitor and type 2OO0L. This will 


produce 


the following: ,, 


2m- 


A9 00 


LDA #100 


zm- 


A2 15 


LOX #J15 ^J 


2M4- 


9D 59 BF 


STA IBF59,«^,^, .:- ' 


2Bfl7- 


CA 


DEX .,X^ 


2008- 


10 FA 


BPL »004 


20«A- 


A9CF 


STA*BF58 '^^ J. 


200C- 


8D5dBF 


20«F- 


A9 01 


LDA mi 


2011- 


8D 6F BF 


STA »BF6F •'" 


2014- 


AD30 8F 


LDA $BF3a ■• 


2017- 


8D26 20 


STA $2026 


201A- 


20 00BF 


JSR $BF0tf - ■" , ■'» 


2010- 


se 


m 


201E- 


25 20 


AND »2B 


2020- 


D0 F2 


^E $2014 


2022- 


4CM22 


JlilPJ2200 .: 


2025- 


03 


171 -' 


2026- 


00 


BfiK 


2027- 


00 22 




2028- 


07 00 





Tliis code references locations $BF58-$BF6F 
in locations $20()O-$2011. A close look at 
Quality Software's Beneath Apple ProDOS 
(BAP) will show you that this is where ProDOS 
keeps its map of fiee and used memory. 
ProDOS keeps this map as a bit-map. A one 
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f 



s 



bit means that that page of memory is in use, 
and a zero bit means that it is available. The 
following table shows the relationship between 
memory locations and the bit map. - ^ 



interpretation for the READ-BLOCK 
cominand is: 



Memory 

Page 

HI 


--, -- Wtn location 
■ r .:Lo Lo 
12 3456 7 8 9 A8CDE F 





68 ■ i» 




6E M^'-'^'^ ' 








u^:M ■ #:- 




68 s: - j^ . 




6A^<.: - M{^ 




6C 'm :•] 


B 


6E 6F 



The low page numbers are arranged in the 
order that ProDOS examines the bits within 
each byte of the bit-tn^. For example, at 
location $2W)A, a $CF is stored in location 
$BF58, Examining the table above shows that 
$BF58 controls nwrnoiy from $0000-$ff700. A 
$CF would mean: 

Page » 00 01 02 03 04 05 06 07 
$CF - 110 1111 



Therefore pages 2 and 3 are available, and 
the rest are used. Continuing in this manner 
shows that Flasbcalc is marking memory as 
available in the following chunks: 

$800-$B7FF - Lines 2000-2008 
$200-$3FF - Lines 200A-200C 
$B800-$BEFF- Lines 200F-20U 

After all this memory management, the data 
from location $BF38 is stored at $2026. Again, 
locdung at BAP shows that $BF3e is the last 
slot and drive accessed in the form DSSSO000, 
where D=0 is drive 1 , D= 1 is drive two, and 
SSS is 1-7 to indicate the slot number. This is 
beginning to look interesting. The only reason 
to get a slot and drive number is if a disk access 
is about to be done! 

Location $201 A bears out this suspicion: a 
JSR to $BFfl0. the entry point of ProDOS's 
machine language interface (MLI)- A fiill 
description of the MLI can be found in BAP, 
so only the pertinent inform^on will be given 
here. Immediately after a JSR to the MLI, 
ProDOS expects to find two pieces of data: (1) 
A single byte indicating what fiinction the MLI 
is to perform, and (2) a two byte address in lo, 
hi form pointing to where the MLI can find the 
rest of the parameters for this call. 

In this case, the first byte at $201D indicates 
a call to the READ_BLCX;K ftinction and the 
next two bytes show that the address of the 
parameters is $2025 . The parameter block and 



location 


value 


meaning " r'' „^ ' 


$2025 
$2026 

$2027 
$2029 


S03 

Ixx 
$2200 

$0007 


Three parameters follow 
Slot antf drive parameter 
Address to load data to 
Block number to read 



Note that the byte at $2026 was filled with 
the correct value by the code at $2014-$2017, 
This call means that the MLI will load block 
7 from the disk to the address $2200. If this 
call is successful, the zero flag will be set and 
the branch at $2020 will not occur. Then, the 
JMP $2200 will jump into the code just read! 

To find out what happens at $2200, re-route 
the jump at $2022 to jump to the monitor by 
typing: 

2023:59 FF 

Then start the program with 

The disk should come on and then you will 
get the monitor prompt back. 
Now, list the code at $2200 by typing 



The first few instructions will be; 


'1 


2200- 


A0 00 


LOY #$00 


■S" 


2202- 


B9 00 22 


LOA $2200, Y 


.'4 J 


2205- 


99 00 40 


STA $4000, Y 


. H 


2208- 


C8 


INY 




2209- 


D0F7 


6NE $2202 




220B- 


4C 0E 40 


JUP $400E 




2Z0E- 


20 75 40 


JSR $4975 





TTiis code moves memory from $2200 to 
$4000 and then jumps to this new code at 
$400E, To see what is moved, type 

22K::59 FF 
22i8G 

You will quickly find yourself back in the 
monitor, but the code will have been moved. 
List the code at $40OE. The first thing you sec 
is a JSR $4075, so without looking any further, 
type 

487SL 







■. - ' * 


<V"J^?^ 


begins 


with: 




■ £l!i 


4075- 


20 91 40 


JSR $4091 


■ .../^ 


4078- 


90 01 


GCC $407B 




407A- 


60 


RTS 


■■i^'m^.w 


407B- 


AD30BF 


LDA $BF30 




407E- 


29 70 


AND #$70 




4080- 


4A 


LSR 




4081- 


4A 


LSR 




4082- 


4A 


LSR 




4083- 


4A 


LSR 




4084- 


09 C0 


ORA (l$C0 




4086- 


85 37 


STA $37 




4088- 


A9 00 


LDA #$00 




408A- 


85 36 


STA $36 


' • ■ 


408C- 


A9 A0 


LDA #$A0 


: .I'r.r 


408E- 


6C 36 00 


JMP ($0036) 





sl« number in the form DSSS0000. With this 
in mind, and assuming that you boot from drive 
1 in slot 6 so that this should be 01010000, 
follow the code. You will find that, by the time 
you reach $408A, locations $36-$37 wiU 
contain 0OC6, which will cause $408E to jump 
to C600. This reboots the disk! We have found 
part of the protection code! 

Now, look iMck at $4075. It contains a JSR 
$4091 , then if die cany flag is clear, it executes 
the rebooting code. This must mean that the 
carry flag is set if all is okay, and cleared 
otherwise. One more excursion is in order. List 
the code at $4»91-$40DC. I'U leave it up to you 
to do a full deciphering of this code. However, 
I will tell you that it looks for the following bit 
pattern on the disk: 

10101010 11101011 00... 000 11101100 
$AA $EB $00 $EC 

The special thing to note here is the string 
of zero bits between $EB and $EC, Normally, 
ProDOS cannot read or write a string of zeros 
reliably. In fact, if ProDOS read the above, it 
would see just $AA EB EC, and completely 
ignore the zeros! Apparently, the protectors of 
Flashcalc have written the string of zeros using 
a special write routine. The software just looks 
for the sequence $AA EB 00 EC. This will not 
be found on a disk copied l^ COPYA and some 
bit copiers. This type of protection I call 
signature analysis, because the protection code 
looks for a certain signature on the disk. 

At the end of the protection code, you can 
see the following sequence (without the 
comments, of course): 



40D1- 


CMP #$EC 


Is byte a $ECt 


4003- 


Bl€ $40DB 


Go if not 


40D5- 


SEC 


Signal everything OK 


40D6- 


BCS $4009 


jump always 


40D8- 


CLC 


Signal bad disk 


40W- 


LOA $a88,X 


Turn off the drive 


40DC- 


RTS 


Return to caller 



Since we want to set the carry flag no matter 
what, the only change would be to change 
location $40D8 from a CLC ($18) to a SEC 
($38). This would cause the calling routine at 
$4075 to think that everything was just fine. 
Believe it or not, Flashcalc is effectively 
protected by just one byte! 

The proasdure to make a copyablc version 
of Flashcalc is as follows: 1) COPYA the 
original Flashcalc disk. 2) Use a sector editor 
to make the following change. Note that 
ProDOS uses a different notation for disk 
access. I have given the ProDOS block numt>er, 
the DOS 3.3 sector number, and the actual 
Physical sector nundter for die patch. Most Zap 
programs use the DOS 3.3 sector notation, so 
if you don't know which one to use, DOS 3.3 
is your best guess. 

ProDOS Block: Block 7 

DOS 3.3 Sector: Track 0, Sector 1 

Physical Sector: Track 0, Sector 



First, look at the code at $4«7B-$408E, 
Remember diat $BF30 contains the drive and 



Changt byu tDB Iran $18 4fr 



$38 
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softkey to,.. 



KARATE 
KAKATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
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KARATE 
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KARATE 
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KARATE 



KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATF 
KARATE 
KARATE 
KARATF. 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 



KARATE 
KARATE 
KARATE 

KARATE 
KARATE 

KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 



KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KAR .7" 

KARA' 

KARA' 

KAR. 



KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 



ka: 

KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 



KARATE 
KARATE 

KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
KARATE 



KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
\TE 

__ ATE 

KARATE 
KARA' 
KARA' 
KARAI 



KARATE 

KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
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KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
"E 



KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 

ka: ^ 



KARATE 
KARATE 
KARATE 

KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
Tr 

t: 



KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 



KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARA-^" 
KARA' 



KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
" "RATE 
- - .j.E 

.TE 
.TE 
.T" 
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KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
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KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
KARATE 
KARATE 
KARATE 
KARATE 
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KARATE 
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K 
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KARA' 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KARATE 

KAR ATI: 
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KARATE 

KARATE 

KARATE 

KARATE 

KARATE 
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KARATE 

KARATE 

KARATE 

KARATE 
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by Danny Pollak 



Broderbund Software 

17 Paul Dr. 

San Rafael, CA 94903 



Requirements: 

Apple ][ Plus with 64K 

Karateka 

One blank disk 

Karateka is a recent release from Broderbund 
Software which has set the trend for upcoming 
games. With smooth graphics, great sound 
effects, and a realistic action, how could this 
game miss? Broderbund didn't overlook a single 
minor detail. In his review of Karateka in issue 
no. 19, Jefl' Hurlburt closed with this statement: 
"Simply put, Karateka is a breakthrough. Art 
merges with technology to produce a game 
almost as much fun to watch as to play." 

Their Protection 

An examination of the Karateka disk shows 
that the game resides from Track $00 to Track 
$20, Track $01 contains a loader which reads 
in another loader from Track $02.5. Then, 
depending on the value in the accumulator, the 
second loader loads in a portion of the game. 
With this in mind, I set out to deprotect 
Karateka. 

The Softkey 

I) The first thing we need to do is to initialize 
the blank disk so that it will BLOAD the 
program when booted. Boot an initialized disk 



(preferably with a fast DOS). Then insen the 
blank disk and type in the following: 

CALL -!51 

9E42:34 

INIT KARATEKA 

DELETE KARATEKA 

2) The next thing we need to do is move the 
disk controller ROM down to RAM where we 
will mtxiify it so that it will exit into the Monitor 
upon loading Boot 1 , 

96(tfl<C6e».C7»eM 
9«FA:98 
98»!:4C 59 FF 

3) Execute the modified controller by entering 
96»0G 

4) Boot I has now been loaded into memory at 
$800. Move it to $9800 and modify it so that 
it will also exit into the Monitor. 

9m5-M 
9839-.93 
9381 :4C 59 FF 

5) Execute the controller at $9600 again, 
96e0G 

6) The code at S9800 has now loaded another 
section of code at $300. This code moves a 
portion of itself to $ 1 000 , jumps to S 1000 , and 
then reads data from the disk and stores it from 
$200 to $7FF in memory. At $3 BE there is a 
jump to $300, We will move this code at $300 
to S9300 and modify it so that instead of 
jumping to $300, it will move the code from 
S200-$7FF to $2 100-$26FF and then exit to the 
Monitor. 

93»S:93 
93BE:4C «B 68 



Mm-.Ai msDmn 9d m 21 

E8 DB F7 EE M 6fl EE 87 
60 AD 04 60 C9 08 90 EA 
4C 59 FF 

7) Execute the disk controller for the last time. 

96000 

8) The code that was read in at $300 is 
responsible for reading data from Track $01 and 
storing it from $4000-S4lFF in i-nemory. It then 
jumps to the subroutine at $4000 which reads 
data from Track 2,5 and stores it from 
$5000-S57FF. The routine at S.5000 loads a 
certain portion of lire game depending on the 
value in the accumulator. 

We can alter the code at $300 so Oiat it will 
exit into the Monitor instead of jumping to 
$4000, Do this by entering: 

39»:4C 59 FF 
30eG 

9) An examination of the code at $4000 shows 
a jump to $5000 at $401E, Alter this code to 
exit into the Monitor and then execute h, 

401E:4C 59 FF 
4000G 

10) Examining the code at $5000 shows that 
depending on the value of the accumulator, 
execution will cither fall through to the jump 
to $5300 or branch past the jump statement and 
continue executing. Before the jump to $300 
back at step 6, the accumulator was loaded with 
$80. This value would cau.se the execution to 
fall through to the jump to $5300. The code at 
$5300 loads the main portion of the game and 
then jumps to $200. We will alter the code so 
that after it loads the game, it will exit to the 
Monitor, 

5320:4C 59 FF 
5300G 
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11) The nuin program is now in memoiy 
located at $8W-$FFF and $6M0.$9FFF. We 
will compact the code and then boot the 
initialized disk. 



*^»«^. % it Ixt-jMjfW.-i; , 



27M<8M.FFFM 
2FM<6FW.9FFFM 
6FM:M 
6Ftl<6Ftt.7«FFM 

12) Enter Che following hexdumps. The routine 
at $2000 is the memoiy move which will put 
the program back in its proper locations. The 
routines at $6F09-$70FF will be moved to 
$F6ei0-$F7FF on the language canl. The routine 
at $6FO0 loads the picture of the castle. The 
routine at $6F20 loads the files for each section 
of the game. The routine at $7000 swaps the 
area occupied by DOS with all of Bank 2 on 
the language card aitd part of Bank 1 . This 
routine is used when DOS is needed to load a 



program. 



2000 
2088 
2010 
201B 
2120 
2028 
2030 
2038 
2040 
2048 
2050 
2056 
2060 
2068 
2070 
2078 
20B0 
20B8 

6F00: 
GF0S: 
6fl0: 
6F18: 
6F20: 
6F28: 
6F30: 
6F38: 
6F40: 
6F4B: 



81 ahc 81 C0 ^A2 00 ] S76EB 

" '" '" JC920 

t349E 
$396E 
$C0FB 
$CC£0 
S7U0 
S6D36 
iCF4F 
$MC2 
»447D 
i3FM 
JCAF6 
JC452 
S5ABC 

}4ie2 

$5E79 
tC167 




tK A9 00 
_ ia A5 01 

85 86fil'4B 2C ^0^^ 2C 
WWSl£ilJS 2C 55 C0 
^0C01i 



20 00 
9D 75 
20 72 

tTm 

F7 A2 
ME8 
F6 A9 
F6 20 
F6 A9 



F7 A2 00 
AA E8 E0 
F6 20 00 
D4 D5 PI 
B0 80 6D 
ee BD 69 
E0 08 00 
CI 60 7A 
00 F7 A9 
Afl 6D 55 



BO 17 F6 

07 D0 F5 
F7 60 00 
.C5 00 flft J 
F6 20 00 
F6 9D 75 
F5 20 72 
AA 20 72 
40 80 52 
F6 A2 00 



6F50: BO00409O00A0E8O0 

6F58: F7 EE 52 F6 EE 55 F6 AD 
6F6fl: 55 F6 » Cfl « EA.IC 2C 
6F68: 02 t,CC CF_ C1C 4 A0 A0 A fl. 
6F7fl: UW^ 78 84 80 00 F0 
6F78: Airaj4,8D 01 F0^ F8 
6F80 : J*i8irK F^ ^DJBJ*, 80 
6FS8: 03 F0^Q7S0^|8O 04 F0' 
6F90: jtMlM0^ F8/0 F8 
6F98: 0^80 06 F0/AD EC B7 0A 

80 7E MJ1'?3 la^ 50 
^20^ 



6FA0 
6FAS 
6FBI 
6FBS 



78 04)a& 0T"ffl.lO"71 .. 

AD 02.F0)SO FB 0<i)AD 03 

6FC0: F0)8O FB BOaO 04 FOJSD 
6FC8: 78 fl^ADjaLffli8OFff05 
6FD0: AD 0$ F0 80 F8 06 60 



S1091 

$4FE1 
$B983 
JIFEF 
teOfiO 
$BA16 
S9e3F 
$4AAA 
tA094 
$1494 

I77CB 

$97E0 
$393C 
$6259 
$9198 
$B0Fe 
SEEBA 
$DeF3 
JC7D5 
$BF96 

J5EF8 
$4000 
$0733 
$A3C3 
$925B 
$7E9G 
$1097 



7000 
7008 
7010 
7018 
7020 
7028 
7030 
7038 
7040 
7048 
70S0 



20 83 00 2C 83 

85 FD)A9 00) 85 
84 FC^4 F6BI 
FE 91 FCt«8 91 
F3tEfi FOB FF 
F0/90 E9/2C 8B 
M>9 96' 85 fO 
WbI FC/48;ei 
68 91 FE C8(D0 
E6 FF A5 FF C9 
60 



Cfl A9 A0 

FF\A0 00 
FC>a.)Bl 
FE C8 00 
A5 fgrC9 
88 
'85. 
F&'9l FC 
n E6 FD 
DA 90 E9 




$50B9 

$8A45 
$71AF 
$758B 
$50F1 
$1E9E 
$2330 
$C567 
$B050 
$6C2F 
$97DC 



13) The next thing that must be done is to alter 
the ICarateka code so that it wilt jump to our 
routines when it goes to load a portion of the 
program. 



21tE:4C 29 F6 
214B:29 M F£ 

2299: Fl 
229C:F1 



'/'i 



14) That's it for now. Now all that is left to 
do is to save the file and we will have the main 
program stored as a single file on disk. 

BSAVE KARAT£KA,A$2M0,L$51M 

15) We're not done yet. Now we must capture 
the picture and the other portions of the game 
which are loaded in during play. We will let 
the loader from Karateka do this for us. For 
the loader to work, the disk read head must be 
located at Track $0). We must use 1X>S to 
cause the read head to seek to Track $01 and 
alter our main program so that after it has 
moved itself to its original location, it will exit 
to the Monitor. 



^'wt 



16) We will now use the loader which b located 
at $300 to load each section of the game. After 
we load each seaion, we will use our swap 
routine at $F700 to move DOS back into place 
and then save the files to our initialized disk. 
At this point it would help to have two disk 
drives, but it is not mandatory. If you only have 
one drive, then you must insert your initialized 
disk, save the files for that section, seek the read 
head back to Track Ml and then put the 
Karateka disk back into the disk drive. If you 
have two disk drives, then you need only to 
insert your initialized disk into drive 2 uid save 
the files. The read head on drive 1 will still be 
at Track $01 . Insert the Karateka disk into drive 
1 and type in the following: 

390:4C S9 FT 

3WG'' ■ 

401E:4C 59 Ff 

^B 

:M 



300:20 £3 03 4C D9 03 




B7EC:01 M 




B7F4:00 




300G- 


•■ 


2088:4C 59 F¥ , . 


^^A"^ 


2299:4F ^ % 


\v^ 


229C:4F 


--■ 1- ■ 


2000G. — 





4W0<A0M.BFFFM 


-7 AT* 


C0S3 


' ^ r.y 


F700G 


- — — 


A851G 





t 



17) The files are now in memory. If you have 
two disk drives, then complete this section and 
lUp »ep 18. If you have only one disk drive, 
thrai go to step 18. Insert the initialized disk into 
drive two and enter the following: 

BSAVE LOAD0,A$40««,L$2M0.D2 

BSAVE LOAD0A.A$I009,L$1M« 

9EE0G 

P7IIG -^- 

C«EA 



^ 



18) Insert the initialized disk into drive one and 
enter the following: .« 

BSAVE LOAD0,A$400«,L$200» '^ 

BSAVE LOAD0A,A$lf0».L$10fi ^ 

60«0:A9 B7 A0 E« 4C B5 B7 ^ 

B7EC:01 00 ^ 

B7F4:00 ^ 

9EE0G ^• 

F700G 2. 

Reinsert the Karateka disk into drive one. 

19) There are five different loads during the 
game and also the picture. We have just saved 
the first toad 10 disk under the names LOAD0 
and LOAEWA. To gel the other four sections 
loaded and saved to disk, you need to loop back 
up to step 16. There are two thin gs tha t will 
be done differently. After you type OEI . vou 
will enter the number of the section (0^) that 
you want to load. You already loaded section 
so the next mimber will be 1 . The only other 
change that must be made is when you save the 
files. Replace the with whatever number 
section that you loaded. For instance, you 
would use BSAVE LOAD4,A$4000,L$2e00 
and BSAVE L0AD4A,A$ 1000, LSI 000 if you 
had just loaded in section four. Loop back to 
section 16 and follow the instructicsis doing the 
changes described above. After you have done 
this for all five sections, go to step 20. 

20) The only thing left to do is to capture the 
picture file on disk. Do this by entering the 
following: 

3A5G • m 

2«00<A0t0.BFFFM > ^ 

C083 

F700G 

A851G 



;20M,i 



BSAVE PICTI;RE,A$20«0,L$2M0 



A Hnal Word 

Now you have a completely COPYA-aHc 
version of KatBteka. Maybe someone out Acre 
can come up with some APTs which will stop 
you from beiiig hit or continue the game if you 
get killed. There are many jump tables 
throughout the main code which could help in 
your search for a certain routine. Good Luck! 



J5i_ 
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Newsroom includes a large file 
of "clip art" and other graphic 
utilities to help you produce 
newsletters. Deprotect this 
handy graphic package by 
using the Super lOB vl.5. 




■^ 



of it's programs to this RAM disk upon bootup. 
That is why program transfer is so quick using 
a 128k Apple. On a ][ Plus, the programs are 
loaded from the disk drive when needed. Drive 
three is used by the Newsroom 1X)S to 
designate the RAM drive. 

3 . Newsroom checks a disk before accessing 
it to be sure that the desired disk is in the drive. 
There are three possible outcomes to this check: 

a. Program Disk: verified by presence of 
modified address epilog marks and the presence 
of SSI NR on track 511 sector $m. 

b. Clipart Disk: verified by presence of 
normal address epilog marks and SSI CLIP on 
track $22 sector $00. 

c. Storage Disk: verified by presence of 
normal addiras epilog marks but not Clipart 

disk. 

Notice that the presence of the modified 
address epilog marks (SADBB instead of 
SDEAA) is checked, but then a double check 
is made in all the above cases. Unfortunately, 
the program checks for these modified epilog 
marks first, and then does the other checks. This 
means that to defeat the protection scheme, the 
routine which checks for the modified epilog 
marks must be changed to always return the 
correct value corresponding to the disk which 
is supposed to be in the disk drive. The second 
check will then determine which disk is actually 
in the drive. Very close {and long) examination 
of Newsroom's code reveal«l diat location 
$3AD contains the expected value returned by 
the protection code AND-ed with $80. $3AD 
contains $80 if altered epilog marks (program 
disk) are expected and $82 if normal epilogs 
marks are expected. The protection code must 
return die value at $3AD AND $7F and the 
cany flag clear whenever it is called. 

4. On the latest version of Newsroom (the 
one that allows you to convert hi-res pictures 
in the photo program) there is a nibble count 
during boot up. 



Step By Step 

As usual, wt can now use our findings to 
deprotect the disk. Following is a step by step 
procedure which you can follow to copy the 
Newsroom. 

1) Install the Super lOB controller at the end 
of this article into your copy of Super lOB vl .5 
and RUN it. Note that if you have the later 
version of Newsroom (the one that allows hi- 
res picture conversions in the photo section), 
you will have to change the IS in line 1 190 to' 
a2fl. '■ 

2) Search the disk for the following bytes and 
change to the indicated sequences. Note that 
they will be found in more than one location 
on the disk, so be sure to search the entire disk! 

Search for: AE E9 B7 BD 8E CS BD 3C C0 A0 
Change to: AD AD 03 Z9 7F IB 60 EA EA EA 

Search for: 2C 50 C0 A9 01 9S FB 20 24 IF 
Change to: 2C 50 C0 A9 Be 38 B0 89 EA EA 

Note that the second sequence will only be 
found if you have the later version of 
Newsroom as it is the nibble count routine. 

About The Controller 

The Newsroom controller normalizes the 
Newsroom DOS by performing sector edits 
which simulate the routine to change to normal 
DOS. If you have the later version of 
Newsroom, there are more changes that have 
to be done to Newsroom so that it will read 
normal disks. That is why you must make the 
15 in line 1 100 a 20. 

In addition to normalizing the Newsroom 
DOS, the controller also disables the DOS 
switching routines by placing an RTS as thier 
first instruction. 

The two POKES of line 1010 set DOS to the 
super extended retry mode. I found that because 
of the strange sector marks being used by 



Newsroom, the sectors are harder than normal 
to read widi normal DOS. Therefore, some 
sectOTS will speed by and some sectors will take 
a while to read. Hopefully the super extended 
retry mode will make DOS patient enough to 
read every sector of your Newsroom original. 
Finally, if your clipart disks aren't 
COPYAable, you will have to deprotect them 
by usin^ the Stqier tOB controller wd removing 
the "GOSUB 1100" in line 1020. 

Many Thanks to Glen Tatum 

controller 

1000 REM NEWSROCW CONTROLLER 
lBlflTK-fl:LT«35 :ST«15 :LS = 15 :CD=VIR:FAST 

* 1 : POKE 48573 .0 : POKE 48588 ,208 
1020 RESTORE : OO6UB170 : GOSUe490 : QOSUB610 

: I FTK = THEN GOSUB 1100 
1030 GOSUB 230 : GOSUB 490 : GOSlffi 610 : IF PEEK 

(Tfflt ) = LT TI€N 1050 
1040 TK» PEEK (TRK) :ST.PEEK(Sa) : GOTO 1020 
1050 HOKE : PRINT 'COPYDONE" : END 
1100FORA-1TO15:I«ADA1 ,A2 : POKEAl ,A2 : 

NEXT : RETURN 
5000 DATA 173 ,187 ,237 ,187 
5010DATA13470 ,222 ,13475 ,170 
5020 DATA 13109 ,222 ,13119 ,170 ,13201 ,222 
5030 DATA 13204 ,234 ,13205 ,1S9 ,13206 ,140 

,13207 ,192 ,13208 ,16 ,13209 ,251 ,13210 

,201 ,13211 ,170 
5040DATA 12905 ,96 ,12927,96 
5050 DATA 12469 ,222 ,12467 ,170 ,12462 ,222 ""^ 
5060 OATA 12221 ,48 ,11985,40 

CCTtroller chedtsums 

1000 - I356B 5000 - $1542 

1010 - S1EB4 5010 - SA6B7 

1020 - S5698 5020 - I314B 

1030 - $6301 5030 - $5165 

1040 - $F4AD 5040 - $DC3E 

1050 - $9EF2 5050 - $AA6S 

1100 - $FC87 5060 - $B72F 
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E-Z Draw 
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This 1980 graphics system has some useful ftinctions which more recent 
programs still lack and it has some sophisticated protection schemes, too. 



.■-:;% 



by Nkk GfUbreath >f 



If 



7CJ98 Rockingham Dr., &e, 12 
Sacmmenio, CA 95827 



:h<;*. 






ReqnlraiMnti: ji v ;! > 

Any of the Apple ][ line 

COPYA or an equivalent sector copier 

A blank disk - 

E-Z Draw, tbou^ vei> old (published in 
1980), is still a complete graphics package and 
has some very useful functions which the more 
nHxicm programs lack. It also has a very 
sophisticated protection scheme which, thou{^ 
DOt hard to Copy, appears to be very hard to 
crack. If you are CHdy interested in the crackii^ 
go to the end of th^ anicle. 

The Scheme _ . 



Aa moikncd in iny Connrikr Writer article 
(HC #16), E-Z Draw uses eight different 
address headers per track and the epilog bytes 
change nearly eveiy sector. This changes every 
track so there is really no pattern. It is F8 ROM 
protected by loading its own monitor routine 
into the RAMcard and its RWTS routine is 
nonstandard so using Demuffm or a Swap 
controller produtxs only "1/0 ERROR," 

This discouraged me, until I finally did get 
into the monitOT and found how E-Z Draw reads 
in sectors. It AMDs every byte with $DS (the 
Dormal byte for an address header). If the result 
is $D5 thai it has found the first byte in the 



address header. It also does a similar routiiie 
for the last byte in the addrras header ($%). 

The Crack. Ko-vv 

This is very complicated, since the proted to n 
was very complicated, too. If you're a novke 
in the field of cracking and machine code, I 
suggest going to the cookbook instructions at 
the end. 

First off, enter the monitor and disable the 
checksums: 



B92D: 
B989: 



18 M 
18 M 



We need some space in DOS so we can add 
some extra code to read in the E-Z Draw seaat. 
A good place is the $B6W area since it is only 
used when putting on DOS after initialization. 
To ftee it enter: 

B74A; M 
A56B: M 

The second change prevents a Hi-fde from 
beit^ saved during initiidizatton; this justs saves 

time. And now, our patch; 

B«M:29 D5 C9 D5 «t 29 96 06 
BM8:9« Dfl »3 4C 6D B9 -IC S4 
B6»:B9 

Check your typing against the following: 



8600- 29 D5 


ANonos 


8602- C9 D5 


CHPlVtM 


8604-60 


RTS 


8605- 29 96 


AND #}96 


6607- C9 96 


OX? n% 


8609-00 03 


BNE tB60E 


860B- 4C 6D B9 


JHP tB96D 


e60E- 4C 54 B9 


JHP $B954 



To enable this patch enter: 

B954: 20 M B« EA 
B969: 4C 05 B« EA 



Go back to basic with IQCI and run 
COPYA. When done copying, you will have 
cracked it! It will boot up just fine, however 
I suggest adding a new DOS since one can then 
RESET out of the program itormally. 

Also if one needs more space on the diskette, 
UNLOCK and DELETE FPBASIC and 
APPLESOFT (or 57 sectors. To get 50 more 
sectors, ran a program that rebuilds the VTOC 
(like FIXCAT or Disk Recovery) or copy all 
the files (yukl> onto a new disk. , ^ 





Recap 




Boot up i 


DOS 3.3 System Master diskette. 


CALL-I51 'f 


-, 


B92D 


18 68 ^ ■^- '»»«C»««wwj 


B989: 


I8 60 


. ^- -■ 


B74A 


6« 




A56B 


60 




Bti00: 


29 D5 C9 D5 60 29 96 C9 




B608: 


96 D0 03 40 6D B9 4C 54 




B610: 


B9 




B954: 


20 00 B6 EA . ,. 


■ Mh 


B969: 


4C05B6EA -, .^v ., 


•W.' 


^ 


^: , * : 


«w»-, 



Run COPYA and copy the E-Z Draw nia^r 
disk. 

BRUN MASTER CREATE 

And add a new DOS with the hello file named 
"SnUUS SOFTWARE (Q 1980". Copy 
complete! 






' f*^ *t C^'i- 
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Using ARD To Softlcey. 
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by Chris Chenault 



Mars Cars 

Datamost, inc. 
8943 Fulbright Ave. 
Chatsmyrth, CA 91311 



Requirements; 

Apple ][ 
48K slave disk 
A blank disk 
A sector editor 
Mars Cars disk 

Your first question after reading the title must 
be "What in the world is an ARD?" Well, the 
ARD (Anti-Reboot Disk) is a disk that's had 
its bootO sector modified so that it fails to boot 
the rest of the DOS, but jumps to the Monitor 
instead. Some disks reboot after Reset is 
pressed. The ARD prevents this. Most of the 
memory is left alone except for $8M-8FF, 
$300-355, and die Monitor's favorite hangouts 
in Zero Page. In this way, die RWTS could be 
captured for use in Super lOB. ft can al-so be 
used to capture a single load program if it does 
not need those locations I mentioned. As an 
example, we will use this to crack Mars Cars 
from Datamost. 

Preparing the ARD 

1) Initialize a blank (or unwanted) disk. 

2} Run your sector editor and then make the 
following changes to track 0, sector 0: 



Byte 

01- 


From 


To 


A5 


AD 


02- 


29 


E8 


03- 


C9 


ce 


04- 


09 


4C 


05- 


D0 


59 


05- 


18 


FF 



3) Write it back to the disk and you now have 
an official Anti-Reboot Disk! 

How it Works 

When a disk first boots up, the ROM on the 
controller card reads track 0. sector into 
$800-8FF dien it jumps to S801, where it 
normally continues the boot process. That is 
what we're interested in. In step 2 we changed 
the code stored in the first sector so that it turns 
off die drive and jumps into the Monitor for 
you. Here it is: 



801- AD E8 C0 
804- 4C 59 FF 



LDA $C0Ea 

JMP JFF59 



Complicated, isn't it? $C0E8 is the soft 
switch that turns off the drive, and $FF59 is, 
of course, the entry point into die Monitor. 
From there, the rest of die sector is ignored. 
Once it reaches the Monitor, the computer 
thinks everything is normal except for the lack 
of DOS, 

Using It 

Using the ARD is easy. After the game is 
loaded and running, remove the program disk 
and replace it widi the ARD. Hit Reset and let 
die disk do its magic. After the drive stops you 
should be in the Monitor and free to do what 
you wish. From here you can move die game 
or RWTS out of die way and boot normal DOS 
from there. 



Deprotecting Mars Cars 

Mars Cars is a ftin (but lame) little maze-type 
game. The main difference between this and 
other maze games is diat the game's walls are 
also edible. If you're in trouble, you can eat 
a hole through a wall and get away. 

To deprotect Mars Cars we require a Mars 
Cars disk, the ARD, and a blank slave disk with 
no HELLO program. 

1) Boot the Mars Cars disk. Press a key to get 
past the dde picture and the irritadng tank noise. 
You should now be at the menu. 

2) Remove die game disk and insert the ARD. 

3) Press Reset and let the ARD do its thing. 

4) When you are in the Monitor, move the 
program out of the way with 

2e«e<8(M».BFFFM 

5) Boot your empty slave disk and enter the 
Monitor. 

CALL- 151 

6) Type in the hexdump with this article. All 
it does is move the game out of its hiding place 
and jump into it. Save the program like this: 

BSAVE MARS CARS,A$8Wt,L$78ee 

That's all you do. Play die game by typing 
"BRUN MARS CARS". 

hexdump for. , . 

ARD: Mars Cars 

k2 00 BO 00 20 9D 00 80 JB8D5 

E8 00 F7 EE 04 08 EE 07 ?0D9C 

08 AD 04 08 C9 5F D0 E8 $4348 

4C 00 70 iB059 



0810 
0818 



-i 
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A Hardware special feature: 



\i»«? •^. 
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How to be tlhe 

WriteMaster 



You can take command of the write-protect status of your disks 
by making this simple hardware modification: add your own 
switch! Why not change that red LED to amber or green or to 
a tri-state LED to indicate whether your drive is in normal or 
write-protect status? • . •? 



by William Wingfield Jr. 



Requirements: 

One disk drive 

Soldering Iron (optional) ... 

Drill and bit 

Hardcore COMPUTTST No, 22 

Nott: The proceebm described in ihis arricle 
requires the dismantling ofiht disk drive which 
voids its warranty. Hardcore COMPUTTSTwiU 
not be held responsible for any damages 
incurred while fottovHng this procedure. 

^ When a person gets heavily into the 
deprotection scene, he often finds himself 
going through write- protect tabs at a 
substantially increased rate. In addition, he 
finds himself often notching disks to use 
the elusive backsides. 

All Uiis led me to make my first 
modification to my Apple: the adding of 
my own switch which contrc^ed the write- 
protected status. It was something that I 
thought should have been standard 
equipment. In fact, some Commodore 
drives come with this feature. 

Over the past four years, I've had my 
write master switch configured several 
different ways depending on bow I was 
using the drive at the time. 

If your drive is under warranty you may 
not wish to perform the modification 
described below. However, instead of 



drilling a hole in the front of your drive, 
you can ooonect a switch wtdi enough wire 
to let it hang out the back of the drive. This 
way you can remove it if you have to 
return the drive for any reason and it'll 
look like new. I had my switch diis way 
until the day my warranly expired at which 
time I mounted die switch on the front of 
die drive. 



Wliat's Already That 

If you've ever had the cover off your 
drive to adjust the sp^d, or out of 
curiosity, then you've probably looked at 
the write-protect switch. It's a normally 
closed (NC) micro-switch with a lever that 
senses the lack of a notch in ttie disk that's 
in the drive. If there is no notch, then the 
switch is opened (or turned OFF) and all 
write attempts are subdued. Similarly, if 
a notch is found then it rests in its normally 
closed (or turned ON) position which 
allows writing to occur. 



PossiUe Modtfications 

The sinqilest modification is to wire a 
SPST switch parallel with the one in the 
drive (fig. I). If the new switch is in the 
OFF petition, then the drive will operate 
as it always has. If the new switch is in the 
ON position, then the computer believes 
there is a notch in the disk and will allow 
writing to any disk. This lets you write to 
the back of a disk without a notch (and to 



the front with a write-protect tab too, so 
be careful). 

You can disconnect the switch in the 
drive completely and connect the wires to 
a SPST switch and have complete control 
of tbe R/W operations. ON writes anytime 
and OFF never writes but I've found it 
nK»e convenient to have a position diat lets 
tbe drive switch read the disk. 

If we use a SPDT switch with a center- 
off position, we can do whatever we want 
(fig. 2). In one ON position, the disk will 
be checked for a notch by the drive switch. 
In tbe other position, we can write | 
anytime. Finally, in die coiter on pceition, 
nothing can be written at all - ultimate 
control of the write protect status! 

Instaliation ^^ 

Begin by removing the four screws from 
the bottom of the drive that secure the 
cover and remove it. Next, remove tbe 
four screws from the sides of the face 
plate, open die drive door and let it slide 
off the tracks as you move the face plate 
forward. 

A small plastic ring secures the LE D in 
its mount. Remove it as illustrated on 
page 23 by slif^ing a small knife or 
screwdriver under it and prying tbe ring 
straight back until it pops off. 

Next, genUy pull the LED out of the 
mount and the face plate will be free of the 
drive. Refer to fig. 3 as a guide to die 
mounting hole. Tbe fu% plate on Apple 
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disk drives has a thin aluminum sheet on 
the front so a small pilot hole (1/16" - 
1/8") should be drilled as a guide first. 
This will keep the drill bit from biting into 
the aluminum. 

Put the face plate on something soft so 
It won't be marred and drill from the back. 
Access to a drill press is an advantage but 
not a necessity. 

The simplest way to mount the switch 
is to drill the recommended size hole, wire 
the switch the way you want and then 
secure it with the retaining nut. 

Re-assemble the drive and make sure 
that the added wire doesn't interfere with 
the insetting or removing of disks or the 
movement of the head. There is ample 
room in the bottom of die drive for the 
wire. 

A more professional look can be 
achieved by drilling a hole slighdy smaller 
than recommended and direading the 
switch into the plastic. Screw the switch 
in imtil the shaft is flush with the front of 
the faceplate. The retaining nut isn't 
needed. Wire the switch and re-assemble 
the drive. 

I've found that having the switch operate 
vertically is the most convenient. The up 
position, toward the disk, is the position 
that checks the disk. The down position, 
toward die red LED, is the BE CAREFUL 
position, it can always write. 

What jUwut the LED 

If ycHi've grown tired of always seeing 
a red LED this is a good time to change 
it to amber or green. I used a 3PDT switch 
and a tri-state LED to give a visual 
indicadonofthemodethedriveisin. Wire 
the extra 2 poles as a polarity reverser to 
the LED wires and the tri-state. Red 
signals that the write protect is bypassed; 
green that the disk is checked for 
protection. If your 3PDT has a center off 
position, then the LED light will not light 
at all in the center position. 

Advantages • 

Now you don't need a separate 
game-save disk for your adventures. Just 
use the back of the disk for saving. The 
same idea works well for your spread sheet 
program, data base or word processor. Of 
course it is a simple way to quickly double 
the storage capacity of your disks. 

Fuially, I would like to say that making 
this modification is easier than it sounds. 
Also, I have never had a problem using 
both sides of my disks. 
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'$$$$$$$$$$s$$$$$$$$$$$s$$$$$$$$$$s$$$$$$s$$$$$$$$s$$$$$$$$$$$$$$$$$$$$$s$$s$$ss$$$$$$$$s$ 
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The Wheel of Fortune TV game show comes to your computer screen. 



;.K; 
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Rules 



by Jiro Feingold 
and Ray Darrah 



Requirements: 

An Apple ][, //e or //c 

2 or 3 players 

One disk drive 

A few free hours for typii^ 

After eagerly reading my latest issue of 
Hardcore COMPUTIST, I flicked on the tube 
and watched a game show called "The Wheel 
of Fortune." Near the end of the show I had 
a revelation; What if Hardcore COMPUTIST 
printed a program that would simulate being on 
this show? Need [ess to say, I immediately sat 
down at my Apple keyboard and cranked out 
the following program which does just that. 



In case you haven't seen it, The Wheel of 
Fortune is a game show where contestants have 
to solve a hangman-type puzzle in oider to win 
money. I^e money is then used to purchase 
prizes. Of course my version of the game has 
no prizes and the motiey therefore can be 
thought of as points. 

At the start of each turn the player has the 
following options: 

1) Spin the wheel 

2) Guess at the puzzle 

3) Buy a vowel (if the player has enough 
money) -'• 

i, '.- Spinning the Wheel 

When the wheel stops spinning the player's 
indicator will be on a money value, a lose-tum 
space, a free-spin space or a bankrupt space. 

If the wheel stops on a money space then the 
player must guess a consonant he thinks is a 



letter of the puzzle. If he guises correctly, then 
those letters are revealed in the puzzle, the 
player receives the amount of money indicated 
on the wheel multiplied by the the number of 
occurences of the consonant he guessed in the 
puzzle and the player gets another turn. If the 
player guesses a consonant that is not in the 
pu^e, then play continues with the next player. 

If the wheel stops in a free-spin space then 
that player is awarded a free spin and the wheel 
automatically spins again. Players can have 
more than one free spin. . .j^- -^^ui^- 

If the wheel stops in the lose-tum sjMce thai 
play continues with the next player, unless the 
player who spun the wheel has a 'free spin' 
(indicate by an asterisk above his name). In 
which case the player then can use his free spin 
to spin the wheel again. 

If the wheel slops in a bankrupt space then 
that player loses all money earned during this 
puzzle and play continues with the next player 
(unless of course the player has a free spin). 
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If the plaiyer elects to guess at the puzzle then 
tiie player must type what he thinks the puzzle 
is. If the player guesses the puzzle correctly, 
then he is awarded all the money earned during 
this puzzle and play continues with the next 
player and a new puzzle. If the player guesses 
incorrectly, play continues with the next player. 
When guessing the puzzle, spelling and 
punctuation are extremely important. 

Buying Vowels 

If the player wishes, he may unveU specified 
vowels in the puzzle. Each occurence of the 
vowel will cost the player $1S0. If the player 
guesses a vowel that is not in the puzzle, then 
play continues with the next player, unless the 
first player has a ftec spin! The letter "Y" is 
not recognized by "The CORE Wheel of 
Money" as a vowel. 

Wlimtni; the Game 
At the end of four puzzles the player who has 
acquired the most motiey by completing puzzles 
is declared the winner. 

Typing It In 

First type in the first BASIC program listed 
at the end of this article and save it with: 

SAVE CORE WHEEL OF MONEY 

Next type in the first hexdump and save it 
with: 

BSAVE OBJ.CWOM,A$3W,L$79 

To keep you from accidentally seeit^ the 
answers to the puzzles, the words for The 
CORE Wheel of Money are provided as an 
encoded hexdump. To get the words, type in 
the secotid hexdump ami save it with: 

BSAVE CW0M.W0R1M.BIN,AS2M»,L$S47 

To decode the words and put them in a text 
file, a BASIC program is provided. Type in the 
second BASIC prc^ram at the end of this article 
and save it witii: 

SAVE CONVERT WORDS 

To perform the conversion, tyjje: 

. RUN CONVERT WORDS 

To Start up The CORE Wheel of Money, 
type: 

RUN THE CORE WHEEL Or MONEY 

All of the puzzles used in The CORE Wheel 
of Money are divided into seven categories: 
thing, things, person, people, title, phrase and 
place. Note that the title catagory can mean 
more than just a tide of a book or movie. 

A modification you might try is to convert 
the game to hi-res and have a shape table that 
looks somewhat like Vanna White reveal the 
letters. 

Now if I c«Kild only play the game as well 
as Merv Griffin. 



Source Code for. 



Core's Wheel Of Money 



jj(i i ij i i- i it 



■rra/ir- ^l^*^e:^$^'>■*.■^!^^fl^,f?^*»*^.v-- ■ jciS'i^i.-T- 



MFF- 
WFE- 
MFl- 

M83- 
00fi9- 

»02S- 
0024- 
FCAe- 



0300: 
0302: 
0304: 
0306: 
0307: 
0309: 
030B: 
030D: 
030F: 
03U: 
0313: 
0315: 
0317: 
0319: 
03 IB: 
031D: 
03 IF: 
0320: 
0322: 
0324; 
0326: 
0328: 
032A: 
032C: 
a32E; 
032F: 
0331; 
0333: 
0335; 
0337; 
0338: 
033A: 
033C; 
033E: 
0340: 
0343; 
0345: 
0347: 
034A: 
034C: 
034E: 
0350: 
0352: 
0354; 
0357: 
03S9: 
03SA: 
03SC: 
035F; 
0362: 
0365: 
0367: 
036A: 
036C: 
036E; 
036F: 
0370: 
0372: 
0375; 
0376; 
0378: 



STRT.CHAR 

CUR.OIAR 

SPEED 

CUR.VAR 

STRT.VW 

SCRH.PTR 

CH 

WAIT 



A0 03 
Bl 69 
85 83 
CB 

Bl 69 
85 84 
A9 AS 
85 28 
A9 05 
85 29 

A9 00 
85 24 
A5 FF 
85 FE 
A4 FE 
Bl S3 

cs 

C0 F0 

90 02 

m n 

84 FE 
29 3F 
A4 24 

91 28 
C8 

84 24 
C0 28 
90 E6 
A4 FF 
CS 

C0 F» 
90 02 
A0 00 
84 FF 
AD B0 05 
C9 21 
F0 09 
A0 81 05 
C9 21 
F0 0C 
D0 IS 
A2 10 
A9 D0 
20 6E 03 
A9 Al 
2C 

A9 DC 
8D 31 06 
8D 3B 06 
6D45 06 
A5 Fl 
4C A8 FC 
A9 FF 
A2 FF 
A8 
88 

D0 FD 
8D 30 C8 
CA 

00 F6 
60 



,EQ (FF 
EO$FE 
EQ $F1 
EQ $83 
EQ *69 
EQ $2S 
EQI24 
EQ fFCAS 
OR S300 

TF oej.cwoti 

LDY #3 



STARTING CHARACTER FOR STRING 

CURRENT CHARACTER BEING PRINTED IS STRING 

HOW LONG TO WAIT AFTER PRINTING LINE 

POINTS TO im USED VARIABLES VALUE r^.v.. , 

POINTS TO START OF VARIABLES ^-t^ifr 

POINTS TO CURRH4T SCREEN LINE 

OffiSOR HORIZONTAL . . 

MONITOR DELAY ajBROOTlie _ " ' 



\%''ii 



"^i^lt--.- 



— - - LDA CSTOT.VARj.Y d ^- ^ • *-i - ,• ■ 
. 3^ «■*■ STAOJR.VAR 

, - r-m ■ ' .;„:'-■ < u ■'• 

-'■, ^* LOA <STRr.VAR),Y 
f -.2' *■;; STA OJR.VAR+l : 

LDA USAS SET SCREEN LINE TO t^ 
■V »'*'*■ STA SCRN.FTR : 
LDA n 
STA SC«N,PTR+1 



*'a-'''j 






' 5« 






>v .-4 



»*■ 



PRNTSTR 



DO.LINE 



STY.l 



START WITH FIRST MSOF SCREHt 



:w, :i^ ■ 



STY. 2 

-f .<!■■■ 

CLICK 

•;' . n 'f- 

MW.aKR 
EXIT 



NOTE 
DEY.l 



■I V -r^ 



LDA#0 

STACH 

LOA STRT.OIWl 

STA CUR. CHAR 

U)Y CUR. CHAR 

LDA (CUR.VAR) ,Y • 

INY a ■' -^ 

CFY 11240 HADE IT TD END OF STRING? 
BCC STY.l NOPE 
LDY 1/0 «!*' 

STY CUR. CHAR 

AND #}3F HAKE INVERSE 
LDY 01 

STA (SCRN.PTH) ,Y ?/'- . - -• • :-> „ 
INY 

STYCH ■'* ■ , .^,, 4 ,.. ^. 

CPY #40 • y .i ■ 

BCC DO.LINE 
LDY STRT.CHAR 
INY 

CPY #240 V . • ■■ 

BCC STY. 2 • ^i • ■ '^ ^i'';.. Q' 

LDY #0 

STY STRT.CHAR 

LDA ISBB PAST DIVIDER? '" -* 

OIP #$21 

BE<J CLICK • ' -.^ 

lUA t5Bl 

CMP #$21 IF OmOER, THEN jHVE CL\a&S 

BEQ HOV.CLKR -■l 

BNE EXIT io V«. 

HAKE BOOP SOUND , -. ■'^. ■''.■ 



.f-^ 



^ 



■M 



LDX #$10 
LDA #$DI 
JSft NOTE 
LOA #$At 
.HS 2C 
LDA #$K 
STA $631 
STA $63B 
STA $645 
LDA SPEED 
JHP WAIT 
LDA #$FF 
LDX #$FF 
TAY 
DEY 

BNE DEY.ir 
STA $C03« 
OEX 

BNE NOIE 
RTS 



fffiPLACE WITH ■!" 
SKIP NEXT nw BYTES 
PUT A "V 



NAIT A HNIIE 

PITCH OF NOTE 
DURATION OF NOTE 
PITCH |$jN^^^.^^,,^- 



»■> 



yif 









j-t- 



.end of source code 
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BASIC listing for Core's Wheel of Money 



'■-Si? TS»>.i'^ ■•&1 



\ I 
\ I 

\ 



At 



I REM / \ / \ I ^^^'^ r^^m^i>'. 



IBREHV I \ I 

20 REH \ / \ / 

30 REM ! ! 

40 REM CORE WHEEL OF HONEY 

50REM BY JIRO FEINGOLO "" ;fS; 

60 REM ANC RAY DARRAW ' « ^..,«« 
70 REM 1 ! J ,--^V.!;:fe.-.,?«^ 

60 
90 

100 GOTO S80 

110 POKE 34 ,23 : KHIE : POKE 34 ,0 : PME 35 ,11 

: HOME :FT = V» 
12e TY = INT ( RND (*» ) • 7 ) :PZ » PZ ♦ » ; IF PZ 

> m THEN 700 
130 TEXT : VTA6 W : HTAB tr ; PRINT "PUZZLE* #" 

PZ; 
140WOi = G$CRND(l)*2fl + ll(,TY) :SX»2e-LEN 

(W0$ ) / 2 
150 RESTORE : FOTX-BTOTY : R£ADA$ ; NEXT ; KTA6 

20 - LEN (AS ) / Z 
160 PRINT At : VTAB4 : I F SX = THEN SX = W 
J7BHTABW : PRINT SPC( 40 ) ; HTABSX : VTAB4 :VC 
'^ =a:LL = 0: FOR X = W TO LEN (WOt ) 
180AJ = MIOJ(WO$,X.llf) : lFAJ< "A"OftA$>"Z" 

THEN PRINT AS; ; GOTO 200 
IMPRINT"-" ; :LL = LL + 1IV 
200 VC = VC + (AS - "A" OR AS m "E" OR AS = • t ■ OR 
\ AS = "0"ORAS = "U") : NEXT 
?Ifl tFPM(CP ,2) =0ORFT=l#THENrr.0 ; GOfTO270 
220HTABH; VTAB8:PRINTSPC(39^); :HTABW: 

PR I NT "USE* A* FREE* SP IN' (Y/N)*" ; 
230 GET AS ; I F AS <> "Y" ANO« <> "N" THEN 230 
240KTA6W:PRINTSPC(39); : (FAS- "H" THEN ?70 
250PM(CP ,2) =PI((CP.2 ) -W : HTABO" 10 ; VTM 

14 
260 PRINT CHRS (32 + 10 '(Ptt(CP, 2) >B)): GOTO 

350 - ..^^s 

270GOSUB760 :CP=ffi+K; 1*SCP>PLTHENCP«II 
280VTAB8:HTABW:WlFfrSPC(») : INVERSE: 

GOSUB 760 
290 IF LL = < VCTHENVTAB6 : HTAB 1 : PRINT "ONLY* 

VOWELS* LEF" : GOTO 520 
300VTA8 8 : HTAB H : PRINT "$)PIH,*G)UESS" ; 
310 IFP*I(CP ,0) >l49THENPRINT"*0R*B)ltY* 

VOWEL" ; '*-,.-.y---'V*.%i 

32aVfAIT- 16384 ,128 : GET A| : F0RX-KTO3 
330 IFASoMIDS (K$ .X ,r) THEN NEXT ; GOTO 320 
340HTAfiW:PRINTSPC(40); i VTAB 8 : ON X SBTO 

350 520 580 
350GOSUB790 lY" 10 • {l + INT ({ PEEK (255 ) - 

3)/10))+'10MCf-H) + 5 ^ ■'' 
360YHABS(Y-24fl*(Y>240)) :X-VAL(mD$ 

(H$,Y,5) ) : IFX = 0THEN610 
370VTAB8 : HTWW ; PRINT"LETTOrT0''TRY=>" ; 
380QETAS: IFAS> "E-OftAI. "I" ORAS = "0*OR 

A$ = "U' OR « < "8" OR A( > "Z" THEN 380 
390 PRINT AS: IF PEEK (1942 + ASC (AS ) ) ■ 160 

THEN 420 
400 VTAB 22 : HTAB 15 : INVERSE ; PRINT "USED" : 

POKEDR,0: POKE PI ,0:CALLPI-W 
'»10 FOR X =1«TO750 : NEXT ; NORKAL : VTAB 22 ; KTAB 

15 : PRINT "USED" : GOTO 2 10 
420 LC - : FOR Y = H TO LEN m% ) 
SI30 IF MIOS (WOS ,Y ,N) > AS THEN HTABSX -H + Y 

: VTAe4:PRINTAS :LC = LC + W 
440 NEXT : VTAB 24 : HTAB ASC (AS } - 57 : PRINT 

AS; : IFLCO0THEK470 
J*59HTABi : VTAB8 ; PRINT "THERE*ARE*NO*" AS 
- "'S* I N*T>IE* PUZZLE" 
460POK£Ofl ,128 ; FORX = 100TO200STEP25 : PO»S 



.J&l'i;.i?^ 



-Vv» 



PI ,X : CALL PI -H : NEXT : GOTO 410 
470 P«(CP .0 ) = PM(CP ,0 ) + X • LC ;LL » LL - LC 
480POKEfffi,64: IFPII{CP,0><flTffiNP«(CP ,0 

)•« ■ ■; ,.■■•■■ ■ ,r;; -i .■: >, 
490 VC . VC - LC * (AS - " A" OR A> « "li! -flRAI*! ^ \ 

OR A$ . "0" OR AS « "U" ) W' ?vac % 
■500IFLL*0THEN540 
510 FOR X » 250 TO 50 STEP - 25 : POKE PI .X : CALL 

Pt - K : NEXT : GOCrO 260 
520 POKE 34 ,4 : POKE 35 ,11 : HTAB « : PRINT 

"PUZZLE*GUBS;" : INPUT'" ;A| 

539 HOME : TEXT : I F AS <> WOS Ti€N POKE OR , : 

PORE PI ,192 ; CALL PI -W: POKE PI ,255: 
CALLPI-W: GOTO 210 

540 PM(CP ,»( ) * PM(CP ,W ) + PBCO' ,fr) :FT o-CP: 

: FOR CP = WTO PL STEP PS V ■ ; 
550 PII{CP,0 ) "=0 : GOSUB 760 : l€XT:CP»FT : VTAB- 

4 
560 HTAB SX: PRINT W0»: POKE OR .20: FOB X=l 

TO 200 
570 POKE PI , RND {W ) * 255 : CALL PI - W : NEXT 

: GOTO 110 
580 HTAB W : PR I NT "VOWEL* TO* BUY=>" ; 
590GETA$: IFAS <> "A" AUDASo "E' ANDA$< 

> " I " AND AS <> "0" WID At <> "U" THEN 590 
600X-- 150: GOTO 390 

610AS-MIOS(WS ,Y-3 .W) : IFAt = "L"T}B<650? ; 
62fllFA$ = "F"THEH67B 
630 POKE OR , 40 : FOR X - 20 TO 2M STEP 2 : POKE 

PI ,X 
640CALL PI - W : NEXT : PII(CP , ) - : G0SU6 760 

; GOTO 210 
650PWEDR ,200 : F0RX = WT05 : POI^Pr ,100 + 

150'(X/2-INT{X/2)> 
660CALLPI-1II: NEXT: GOTO 210 
670 POKE OR, 20 ; FOR X-l TO 50: POKE Ft ,128 + 

127*SIN(X/10} :CALLPI-II:NEXT 
680 PM(CP , 2 ) " PIII(CP , 2 ) +11 : VTAB 14 : HTAB CP 

M0: PRINT"'" ; :G0T035f 
690 REM END OF GAME 
700 FORX- WTO PL STEP PS: IFPIKX ,») >P«(FT 

,|i()THEHFT-X 
710 NEXT : TEXT : HOME : FOR X = 1 TO 20 : PRINT 

PNS(FT)CHRt{!0); : NEXT 
720 VTAB 22 : KTAB W ; PRINT "HAS* WON' THE* 

GAI(E'WITHM"PM(FT,W) 
730 VTAB 24 : PRINT "CARE* FOR* ANOMR'MATCH* 

(Y/N)'" ; 
740 PZ=0 : GT AS: ON (AJ.'Y") GOTO 1010: GOTO 

940 
•750 REM PRINT PLAYERS NAME 
760VTAB16:HTABPM(CP,3) : PRINT PN$(CP) : 

HTAB(CP-W)'10 + 8 .., ' 

770 PRINT 't"P«(CP,0); : NORMAL : PR INT'* "■ 

" ; PRINT : HTAB (CP-i) ' 10 + 8 : PRINT'S"' 

PII(CP,W) : RETURN 
780 REM SPIN WHEEL 
790 SPEED. 255 ; FOR X . WTO WtO (W ) * m + 2S 

: CALL 768: NEXT :6-lW 
800 FOR X « 255 TO 150 STEP - 1 : SPEEfc X : CALL 

768 ; NEXT 
810FORX-150TO0STEP-75:SPEEO-X: CALL 768 

:r£XT:SPEED-25S: RETURN 
820 REN DO PRETTY fflLORS 
830 GR : HOME ; PRINT': PRINT SPC{ 20- LEN (AS ) 

/ 2 )AS 
840X.0 : FORY,<:0TO 39 : COLOR* RND (W) • 255 

:HLINX,39ATY;HLINX,39AT39-Y 
850VLINX ,39AtY; VLINX ,39AT39-Y : IFKEK 

(49152 ) < 12S THEN NEXT : GOTO 840 « 

860 RETURN - -^. . . - •■.....- ..C—.. J 



870 REM INITIALIZE VARIABLES 

880 W$="" :W=1 :X.0:Ys0:KS."SGB" :PI = 

875:[« = 877 
890DIHGS(20,6) ,PN$(3 ) ,PM(3,3) : 

900 PR I NT CHRS (4 ) "READ'CWOH . WORDS" : FOR Y «^ ' 

0TO6: FORX = WTO20 
910 INPUT S${X ,Y) : NEXT : NEXT ; PRINT WRI (4 

) "CLOSE" 
920 I F PEEK (768 ) + PKK ( 769 ) <> 163 THEN PR I NT 

OIRS (4 ) '■ BLOAD* OBJ , CWOM , AJ300" -5? 

930REMTITLE PAGE 

940 AS = "THE' CORE* WHEEL* OF' MONEY" : GOSUB 
P ' 830 : GET AS : I F AS = CHRS (27 ) THEN TEXT 
■*■'• : HOME ; END 
950 AS- "2* OR* 3* PLAYERS? ": GOSUB 830 : GET AS 

: IF AS < "2" OR AS > "3" THEN 950 
9»TEXT:H0ME:PS=W;PL=VAL(AJ) ;PRINTSPC( 

8 ) "T«E* CORE' WHEEL* OF* MONEY" 
970IFPL = 2THENPS = 2 ;PL = 3 
980VT«8 ; FORX=WTOPLStEPPS: PRINT : PRINT 
990 INPUT "PLAYERS* NAME=>" ;PNI(X ) ;PNS(X ) = 

liFTS (PNJ (X ) ,« ) : I F PNS (X ) = " " THEN 990 
1000 NEXT 

1010 WS-*" ;Y = W:FORX = 0TO23 
lK0IFX/4.IHT(X/4)THENW$-WS + "!" + MIDS 
.:. { "FREE'SPINLOS'TURN'BANtffiUPT" ,Y ,9 ) 
V. :Y.Y + 9:X*X + W; IFY> 27 THEN YsW 
l»30RE»50*(INT(RNO(W)M8+.5)+2) :WS 

=.WS+"!'r+STR$(RE) 
1040 WS =WS + LERS ( "^t*' i«- LEN { STRS (RE 

) ) } : NEXT 
1050 HOME: VTAB 22: PRIHT"-^ ■•■■ -- ^tfSHt* 

LETTERS " I :'' ' 

1060 VTA8 1 3 : HTAB 10 : FOR X = W TO 3 ; PR I W^?r .'^ 

SPC{ 9 ) ; : NEXT : VTAB 14 ; HTAB 9 ^ .--:■ 
1070 FOR X- W T03 : PRINT V' " CHRS (92 ) SPC{ - 

7); 

i080FO«Y*0TO2:PI*{X.Y) = 0: NEXT; NEXT:; - 

VTAB15:HTAB8: FCSX = WT03 , .-^ • ■. 

1090 PRI NT V " " CHRS (92 ) SPC( 5 ) ; : ttXt^it 

FOR CP = W TO PL STEP PS 
1100PM(CP .3) = 11 + {CP-l ) • 19 -LEN (PNS(CP 

) ) / 2 : GOSUB 760 : NEXT 
1110 POKE 255 ,0 : CALL 768 :CP= a :NW-4 : GOTO 

110 
1120 DATA TH I NGS , TH I NG , PERSON 
1130 DATA PEWLE , TITLE , PHRASE .PLACE * ''' 



Convert Words BASIC Listing 

10HGR ; POKE -16302 ,0 ;NM$ = "CWOM, WORDS" ; FOR 

A = 768 TO 798 : READ PK : POKE A , PK : NEXT 
29PRINTCHRS(4)"6LOAD"NMS".BIN,A$2000":PK 

=9 : FORAn 8192 TO 10310 :PK=PK + PEEK (A 

) :NEXT 
30 I F PK <> 202623 THEN TEH : HOME : PR I WT 'WORD' 

LIST* INCORRECT" : STOP , y 
40 PR INT CHRS (4) "NOMONCIO" : PRINT CHR| (41 

"OPEN" NM$ 
50 PRI NT CHRS (4 ) "DELETE" NHS ; PRINT CHRS {4 

) "OPEN" NMS : PRINT CHRS (4 ) "WRITE" NMS 

: CALL 768 
60 PRINT CHRS (4 ) "CLOSE" : TEXT : HOME : PRINT 

a<R$ (4 ) "CATALOG" 
70DATA160 ,0 ,185 ,0 ,32 ,73 ,170 ,32 ,237 ,253 

,200,192 ,71 ,240,8 
80 DATA 152 ,208,240 ,238 ,4 ,3 ,208 ,235 ,173 
. ,4,3,201 ,40,144,241 ,96 

^C end of BASIC listings 
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2100: 


79 5F 27 70 6B 66 66 6F 


J29BA 


22E0 


65 78 5B 56 0A 67 6B 60 


$5056 








2108: 


7E 27 50 66 65 7A 7A 73 


J7727 


22E8 


55 78 53 7E 73 27 7£ 62 


$7B20 


hexdumpfor... 




2110: 


0A 5E 53 79 61 27 7E 6F 


$8502 


22F0 


6F 0A 58 5F 68 7E 66 6F 


SB220 




.^~k V^ "V J"V V "V T .^~V ^ >■' 




2118: 


55 5F 70 63 79 63 55 64 


SABC3 


22F8 


79 27 5E 5F 57 65 69 78 


S6F9D 




OBJ.CWOM 




2120: 
2128: 


27 7A 63 69 7E 7F 78 6F 
27 7F 64 63 7C 6F 78 79 


$6842 
$420A 


2300 
2308 


68 7E 79 27 78 6F 7A 7F 
68 65 53 59 58 54 79 27 


S7095 
$7A30 








0300 
0308 


A0 03 Bl 69 85 83 C8 Bl 
59 85 84 A9 A8 85 28 A9 


$2C4B 
$AAB6 


2130: 


6F 27 7A 6F 64 69 53 56 


$E055 


2310 


69 65 57 67 7F 64 63 79 


S28ED 


2138: 


27 68 73 63 69 61 27 7E 


S5EBA 


2318 


7E 79 27 68 67 6F 78 63 


$80F4 


0310 
0318 
0320 
0328 
0330 
0338 
0340 
0348 


05 85 29 A9 00 85 24 A5 
FF 85 FE A4 FE Bl 83 CB 
C0 F0 90 02 A0 00 84 FE 
29 3F A4 24 91 28 08 84 
24 C0 28 90 E6 A4 FF C8 
C0 F0 90 02 A0 00 84 FF 
AD B0 05 C9 21 F0 09 AD 
Bl 05 C9 21 F0 0C D0 15 


$5808 
SD498 
SBAIE 
S3937 

S493E 
SB6D8 
S9E7E 
S3 ICE 


2140: 


73 7A 6F 70 78 63 7E 6F 


SC50D 


2320 


69 58 64 79 27 64 7F 69 


S285E 


2148: 
2150: 


78 27 66 63 6D 62 7E 0A 
58 7F 66 68 27 79 7A 6B 


S0880 

JF5DF 


2328 
2330 


65 5F 6B 78 0A 7A 62 73 
79 53 69 63 79 7E 79 27 


S6A42 

$F3AC 


2158: 
2160: 
2168: 
2170: 


59 6F 0A 79 62 7F 7E 7E 
56 6F 27 7A 66 6B 79 7E 
63 69 27 69 68 78 7A 6F 
7E 27 69 62 7F 78 69 62 


$EE6D 
SD57F 

$369B 
SC30B 


2338 
2340 
2348 
2350 


78 7F 79 79 63 6B 64 79 
27 52 68 78 6E 69 65 78 
6F 0A 59 65 67 7A 7F 7E 
63 79 7E 79 27 70 62 63 


SOEIE 
SIOIA 
SA0C5 
$BA4A 


2178: 


27 68 7F 63 66 6E 63 64 


S4ECA 


2358 


7£ 6F 0A 69 65 66 65 66 


S7270 


0350 

0358 


A2 10 A9 00 20 6E 83 A9 
Al 20 A9 OC 80 31 06 8D 


SC06F 
SC8FC 


2180: 
2188: 


60 27 6F 66 6F 7C 66 7E 
65 78 27 6E 53 79 62 70 


$F401 
SE92B 


2350 
2368 


78 0A 70 65 78 61 6F 78 

79 27 51 56 6F 7A 7E 65 


$FB5F 
S6FF0 


0360 
0368 
0370 
0378 


3a 06 80 45 06 A5 Fl 4C 
A8 FC A9 FF A2 FF A8 88 
D0 FD 80 30 00 CA 00 F6 
60 


$OF92 
SB20F 
$69F8 
J4A09 


2190: 
2198: 
21A0: 


66 79 62 6F 78 27 6C 65 
78 6F 79 7E 27 78 5F 69 
65 78 6£ 27 67 65 7F 64 


$A0E6 
S57F7 

$55AB 


2370 
2378 
2380 


67 5B 54 53 66 69 79 27 
69 65 54 79 7E 78 7F 69 

7£ 63 55 64 0A 70 65 78 


$7003 
SCCID 
SF210 


21A8: 


7E 66 63 64 27 78 65 64 


S9407 


2388 


61 6F 78 79 27 68 7F 78 


$5022 








21B0: 


66 65 5E 0A 78 6F 66 60 


$63EE 


2390 


7E 0A 78 6F 73 64 65 66 


S3F10 








2 IBS: 


56 64 27 60 5F 65 78 60 


$£993 


2398 


5E 79 0A 0C 0A 6E 65 65 


$E712 


hexdu 






21C0: 


6F 0A 58 7F 79 62 27 60 


S70F3 


23A0 


55 73 0A 7A 6B 78 7E 65 


I75E7 


mp for. . . 




21C8: 


66 64 5F 0A 50 65 64 6£ 


$0581 


23A8 


54 27 6F 60 73 7A 7E 63 


S6740 




CWOM.WORDS.BIN 


2100: 


66 27 70 5B 56 7E 6F 78 


$3459 


23B0 


58 54 79 27 68 66 65 64 


$8F01 








2108: 


0A 69 78 55 54 61 63 7E 


$AB48 


23B8 


5E 6F 79 27 7E 62 6F 0A 


$6019 


2000 


68 65 73 79 0A 6B 64 6E 


S7B4B 


21E0: 


6F 27 57 5B 5E 65 64 64 


$2317 


23C0 


60 78 66 7E 6F 60 7F 66 


$6797 


2008 


0A 60 63 78 66 79 27 66 


S65D6 


21E8: 


66 27 63 79 79 66 69 0A 


$OC0E 


2308 


0A 5E 5F 66 6E 27 7£ 6F 


5C22E 


2010 


53 60 62 7E 0A 6B 64 6£ 


I427A 


21F0; 


66 79 53 57 55 7C 27 60 


$B7B5 


2300 


5F 54 5B 60 6F 78 79 27 


S414F 


2018 


0A 6E 6B 78 61 27 62 5B 


S7301 


21F8: 


65 62 64 54 73 0A 69 66 


$4368 


23D8 


5B 54 53 67 6B 66 0A 62 


$3645 


2020 


67 67 6F 78 0A 6B 64 6E 


$B4EE 


2200: 


78 79 65 64 27 60 6F 65 


$5482 


23E0 


65 7F 79 6F 27 70 6B 78 


SD959 


2028 


0A 64 5B 63 65 27 7A 5F 


$4526 


2208: 


78 60 6F 0A 70 66 79 62 


$9952 


23E8 


0A 55 5C 0A 7E 62 6F 0A 


SE9B3 


2030 


64 0A 6B 54 6E 0A 7A 6F 


$71B2 


2210: 


63 64 50 7E 65 64 27 69 


$B4C7 


23F0 


70 65 78 66 6E 79 27 78 


$9778 


2038 


54 69 63 66 27 62 65 7£ 


SCE6E 


2218: 


62 6B 78 56 5F 79 0A 6£ 


$3789 


23F8 


55 59 61 0A 66 78 65 7F 


$0270 


2040 


0A 6B 64 5E 0A 69 65 65 


S0CAE 


2220: 


63 69 51 5F 64 79 27 79 


$25FD 


2400 


54 6E 0A 7E 62 6F 0A 69 


$1831 


2048 


6E 27 79 62 63 78 7E 0A 


SC2BD 


2228: 


62 6F 78 66 65 59 61 0A 


$70E8 


2408 


56 55 69 61 27 60 65 54 


$14F2 


2050 


6B 64 6E 0A 7A 6E 64 7E 


S5AF1 


2230: 


62 65 55 57 6F 79 27 6F 


$04FA 


2410 


5F 0A 70 63 7£ 62 0A 7E 


$20EA 


2058 


79 27 6B 7A 7A 66 6F 79 


!9BB3 


2238: 


6E 60 68 78 0A 66 66 65 


$08£3 


2418 


62 6F 0A 70 53 54 6E 27 


$5161 


2060 


0A 6B 54 6E 0A 65 78 6B 


$0056 


2240: 


6F 64 0A 7A 55 5F 27 66 


$5980 


2420 


7E 62 6F 0A 64 5F 70 0A 


SA88B 


2068 


64 60 6F 79 27 6E 65 50 


S01O8 


2248: 


60 66 7E 52 56 0A 69 62 


$0654 


2428 


73 65 78 61 0A 7E 63 67 


$3021 


2070 


79 0A 5B 64 6E 0A 69 6B 


$B07C 


2250: 


78 63 79 7E 53 6F 27 69 


$3FFE 


2430 


6F 79 27 7E 62 5F 0A 70 


S804B 


2078 


7E 79 27 67 6F 54 0A 5B 


$450E 


2258: 


62 66 78 55 5F 79 0A 6E 


$4OE0 


2438 


68 66 66 0A 79 7E 78 6F 


$8E87 


2080 


64 6E 0A 70 65 57 6F 54 


S3908 


2260: 


66 78 70 53 54 27 78 63 


$EA0O 


2440 


6F 7E 0A 60 65 7F 78 64 


$1BAD 


2088 


27 60 65 55 6E 0A 6B 54 


t6E£E 


2258: 


69 62 5B 78 5£ 0A 64 63 


$E882 


2448 


58 56 27 78 66 63 6E 6F 


S47F3 


2090 


6E 0A 68 6B 6E 27 78 6B 


S03E2 


2270: 


72 65 64 27 69 62 6F 7C 


$5300 


2450 


78 79 0A 65 6C 0A 7E 62 


$F906 


2098 


63 66 78 65 6B 6E 79 27 


SB7D6 


2278: 


73 0A 69 62 68 79 6F 27 


SCC93 


2458 


6F 0A 66 65 79 7E 0A 6fl 


S5A32 


2m 


67 6B 6D 6B 70 63 64 6F 


SFE04 


2280: 


6E 7F 79 7E 63 64 0A 62 


$94 5C 


2460 


78 61 27 7A 78 6F 79 63 


$0086 


20A8 


79 27 64 65 7C 6F 66 79 


S8D61 


2288: 


65 60 60 67 58 64 27 79 


S0E3C 


2468 


6E 6F 64 7E 0A 65 50 0A 


$3A70 


20B0 


27 7E 78 6F 6F 79 27 69 


$5B64 


2290; 


7E 6F 70 5F 54 0A 79 7A 


$3333 


2470 


7E 52 5F 0A 7F 64 63 7E 


$8810 


20B3 


65 67 7A 7F 7E 5F 78 79 


SF5A0 


2298: 


63 5F 56 58 6F 78 60 27 


$E09A 


2478 


5F 6E 0A 79 7£ 68 7E 6F 


S75BA 


20C0 


27 66 63 60 62 7E 0A 68 


$9896 


22A0: 


79 7E 5F 7A 62 6F 64 0A 


$0866 


2480 


79 27 68 66 69 61 0A 7E 


S25B9 


20ce 


7F 66 68 79 27 63 54 79 


SE7BA 


22A8: 


61 63 54 50 27 70 66 65 


$E6B7 


2488 


55 0A 7E 62 6F 0A 6C 7F 


$4029 


2000 


7E 78 7F 69 7E 63 65 64 


SAA19 


22B0: 


7E 5F 78 0A 67 65 64 6£ 


$C8A0 


2490 


7E 7F 78 6F 27 79 66 64 


S7C35 


20D8 


79 27 6B 7F 7E 55 57 65 


S15E8 


2268: 


6B 55 5F 27 6E 63 6B 64 


J8AC5 


2498 


53 7E 68 7E 63 65 64 0A 


$4C03 


20E0 


68 63 66 6F 79 27 50 66 


SEBOe 


2200: 


6B 0A 78 65 79 79 27 63 


$1006 


24A0 


6F 54 60 53 64 6F 6F 78 


$5ECE 


20E8 


5B 79 79 6F 79 27 79 6F 


S125F 


2208: 


64 6E 53 68 54 79 27 69 


S0842 


24Ae 


27 79 6F 69 78 6F 7£ 66 


S4DD4 


20F0 


6B 7E 0A 68 5F 66 7E 79 


$5BBF 


2200: 


65 70 58 55 73 79 27 60 


$1FE7 


24B0 


78 73 0A 65 6C 0A 79 7E 


$0240 


20F8 


27 68 78 63 5F 50 69 6B 


SCOB0 


2208: 


63 78 6F 57 5F 64 27 67 


$01F5 


2468 


66 7E 6F 27 6E 63 78 6F 


$0452 
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continued: hexdump for... 




2678 


66 27 6C 66 79 7E 6F 78 


J7E47 


checksums for... 












2680 


0A 7E 62 66 64 0A 66 0A 


$AE6C 










CWOM.WORDS.BIN 


2688 
2690 


79 7A 6F 6F 6E 63 64 60 
0A 68 7F 66 66 6F 7E 27 


$8045 

$3579 


Wheel of Money BASIC | 


.-. 


■-\-^ • 1- .. t^ Ji.'i? 


J> 


^ IB 


-$BA00 


58fl 

CAA 


- $32CF 


24C0 


69 n 65 78 27 78 6F 7E 


$6eA0 


2698 


66 0A 7A 66 63 64 0A 63 


$F0C2 


2B 

• 30 

4B 


- $9613 

- $4036 

- $AD92 


590 
60fl 
610 


- $3t37 

- $FA71 

- $4A97 


24CS 


7F 76 64 8A 65 6C flA 7£ 


I52A6 


26A0 


64 BA 7E 62 6F flA 64 6F 


$1C73 


2400 


62 6F 0A 60 6F 6E 63 27 


WXIF 


26A8 


69 61 27 78 7F 64 64 63 


$F2a) 


. SB 


-$C8»9 


62fl 


- $9689 


2406 


70 62 6F 6F 66 «A 65 6C 


»9FC0 


2660 


64 60 0A 66 70 68 73 0A 


$800A 


I «B 


- $FF65 


630 


- $C6C7 


24a 


M 6C 65 76 7E 7F 64 6F 


I290C 


2668 


6C 78 65 67 lA 7E 62 6F 


$40CE 


70 


-$A36F 


648 


- $IFBF 


24(8 


27 7A 78 63 64 69 6F 0A 


«20e9 


26Cfl 


flA 6C 66 69 7E 79 27 6C 


$332C 


80 


' $A90fl 


650 


- $C6FA 


24Fg 


65 6C 0A 70 66 66 6F 79 


12288 


2«C8 


63 66 7E 62 73 BA 78 63 


$2090 


90 


-$9240 


660 


- $A034 


24F8 


27 68 6F 7C 6F 78 66 73 


»7FD 


26Dfl 


69 62 27 7E 70 65 flA 69 


$5573 


100 


- $7FB8 


670 


- $6768 








2608 


66 64 79 flA 79 62 65 7S 


$18A5 


110 

« AM 


- $FCF9 

CI ft4 J 


680 


- $8563 

CDDAI 


2S« 


0A 62 63 66 66 79 0A 69 


I35FC 








IZB 

• 130 

140 


- $1A24 

- $AD42 

- $9796 


690 
700 
710 


- $8881 

- $67EF 

- $9145 


2508 


65 7A 27 6E 7F 64 6D 6F 


10005 


26Efl 


7E 0A 6S 6C 0A 68 flA 79 


$0F62 


2510 


65 64 79 H 66 64 6E 0A 


»FE96 


26E8 


63 72 lA 7A 66 69 61 27 


$58FB 


150 


- $AB» 


720 


- $2CE8 


2518 


6E 78 66 60 65 64 79 V 


$0C5e 


26F0 


63 0A 70 65 7F 66 6E 64 


$0811 


- 160 


- $1348 


730 


-$8F1S 


2520 


7E 62 6F 0A 66 68 79 7E 


t9EB0 


26F8 


00 7E flA 7E 65 7F 69 62 


$1E8A 


.V 170 


- $923F 


748 


- tD3% 


2528 


0A 79 7E 66 78 6C 63 60 


14092 


2700 


flA 63 7E 8A 70 63 7E 62 


$10Fe 


N 180 


- $2A6C 


758 


- $10E6 


25» 


62 7E 6F 78 27 78 66 67 


$3323 


2708 


0A6e0A7E6F64flA6C 


$3C6E 


, 190 


-$FEa 


768 


- $S8SE 


2538 


68 65 27 7E 6F 69 62 64 


$9E88 


2711 


65 65 7E M 7A 65 66 6F 


$0671 


f. 2iB 


- $38B6 


778 


- $A575 


2540 


63 69 66 66 M 6F 6E 63 


$36fll 


2718 


27 7E 66 61 6F 0A 68 0A 


$AS1A 


21B 


- $FE6A 


788 


- SBCIF 


2548 


7E 65 78 27 63 7E » 79 


$4Afll 


2721 


66 65 64 60 0A 70 66 66 


$3D9C 


22B 
230 
240 


- $3B4A 

- $3E70 

- $9A42 


798 
808 
810 


- $694A 

- $6389 

- $03E9 








2728 


61 0A 65 6C 6C 0A 68 flA 


$CEE3 


2550 


0A 78 66 63 64 63 64 60 


$6F2A 








250 


- $8944 


828 


- $e0E5 


2558 


0A 69 66 7E 79 0A 68 64 


$2910 


2730 


79 62 65 78 7E 0A 6E 65 


$8FO0 


■~ 260 


- $0850 


830 


- $7060 


2560 


6E 0A 6E 65 60 79 27 7E 


$88A7 


2738 


69 61 27 7A 66 66 67 flA 


$0769 


270 


- $67E8 


848 


- $6A07 


2568 


65 7E 66 66 66 73 0A 68 


$6321 


2740 


79 7A 78 63 64 60 79 27 


$36C6 


-• 280 


- $50DS 


85fl 


- $5A12 


2570 


70 6F 79 65 67 6F 27 67 


$835A 


2748 


7E 62 6F 0A 7F 64 63 7E 


$7446 


290 


- $0621 


86fl 


- $4C06 


2578 


65 64 61 6F 73 0A 65 64 


$2954 


2750 


6F 6E 0A 79 7E 66 7£ 6F 


$79«C 


. 3BB 


- $2533 


87fl 


- $FAEF 


2580 


«A 67 73 0A 68 66 69 61 


$02E9 


2758 


79 flA 65 6C 0A 68 67 6F 


$372C 


;•'. 310 


- $A796 


88fl 


- $4C53 


2588 


27 73 65 7F «A 69 66 64 


$186E 


2760 


78 63 69 66 27 67 66 78 


$425C 


320 


- $3434 


898 


- $3A48 


2S90 


0D 7E 0A 7E 6F 66 69 62 


$4FIF 


2768 


7C 63 64 0A 60 66 78 6E 


$0CA3 


330 

. 340 

3M 


- $0599 

- $B3A1 

- $5833 

- $B85E 


908 

918 
920 


- $4607 

- $9919 

- $07FD 

- $0C2E 


2S98 


IA6664SA65 666EM 


$A84C 


2770 


6F 64 79 27 62 65 7F 79 


$0EA9 








2778 


7E 65 64 0A 66 79 7E 78 


lOFflD 


360 


930 


25M 


6E6S6QeA646F7DM 


$0945 








37B 


-$C7F8 


948 


- $0ECF 


25A8 


7E 78 63 69 61 79 27 7E 


10601 


2780 


65 6E 65 67 6F 27 M 6F 


$AS8E 


m 


- JbMB 


'm 


-ttTW 


2sae 


. 62 6F 0A 69 68 7E 00 79 


$CA20 


2788 


70 M 73 65 78 61 0A 69 


$E093 


390 


- $6401 


960 


- $Cfl7C 


25B8 


0A 67 6F 65 7D 27 70 62 


$2F71 


2790 


63 7E 73 27 7A 63 61 6F 


$9004 


400 


- $iaE 


970 


- $A1BA 


25Ce 


6F 64 «A 62 6F 66 66 0A 


$318C 


2798 


00 79 M 7A 6F 68 61 27 


$8384 


410 


- $A0BE 


988 


- $E47B 


25C8 


6C 78 6f 6F 78 6F 79 flA 


$A860 


27Afl 


7E 62 6F BA 64 65 78 7E 


$0ESB 


42B 


- $BAAE 


990 


- $36e£ 


' 2500 


65 7C 6F 78 27 7F 7A 0A 


$8€46 


27A8 


62 0A 7A 65 66 6F 27 79 


$45A7 


43B 
440 
4S0 


- $F767 

- $0F11 

- IBBM 


1000 
1010 
1028 


- $0374 

- $6588 

- $EE82 


2508 


7E 62 6F M 69 78 6F 6F 


$»4AC 


2761 


63 66 63 69 65 64 flA 7C 


$2525 


25E0 


61 0A 70 63 7E 62 65 7F 


$F33B 


2768 


66 66 66 6F 73 27 64 63 


$89F7 


' 460 


- $AC86 


1030 


- $C88F 


25E8 


7E 0A 66 0A 7A 6B 6E 6E 


$9092 


27Cfl 


66 60 66 78 68 flA 6C 66 


$C6D4 


470 


- $7295 


1840 


- $8800 








27C8 


66 66 79 27 66 64 7E 66 


$6941 


400 


-$C36F 


1050 


-$EF98 


25F0 


66 6F 27 68 79 0A 79 7E 


$0fl4F 








•-■• 490 


- $E669 


1060 


' $A650 


25F8 


7F 68 68 65 78 64 flA 68 


$ACC5 


270fl 


78 69 7E 63 69 66 27 62 


$F2E4 


5Bfl 


-$89f2 


1070 


-$A4Fl 


26«0 


79 0A 66 0A 67 7F 66 6F 


$1702 


2708 


6F 66 7C 6F 64 27 66 7E 


$9eC4 


5ifl 


- $6330 


IBBB 


- $18SC 


2608 


27 66 6S 79 63 64 60 BA 


$821A 


27EI 


66 66 64 7E 63 79 27 7E 


$DECf 


520 


-$3096 


1090 


- $0476 


2610 


73 65 7F 78 flA 67 66 78 


$88SE 


27E8 


66 69 65 67 68 flA 70 66 


$577A 


538 


- $8A7E 

- $2F3F 

- $344E 

- $EA97 


1100 
1110 
1120 
1130 


- $CA82 

- $0OE0 

- $6FBB 

- $E62E 


2618 


68 66 6F 79 27 7A 66 79 


$A161 


27F0 


79 62 63 64 60 7E 65 64 


$9€46 


540 

' 55B 
560 


2628 


79 63 64 60 flA 7D 63 7E 


$CAB1 


27F8 


27 68 78 65 66 6E 7D 66 


$F€27 


2628 


62 0A 6C 66 73 63 64 6D 


$fl47F 


28H 


73 27 6F 64 60 66 68 64 


$B£D5 


^' 570 


- $2795 






2630 


0A 69 65 66 65 78 79 27 


$E054 


2808 


6E 27 7E 62 6F 0A 79 70 


$4014 


••* 








2638 


68 6F 6^ 64 60 0A 65 64 


$804F 


2810 


63 79 79 BA 68 66 7A 79 


$8863 




■ 












2818 


27 60 78 66 64 6E BA 69 


$8362 


dtecksums for... 






2640 


0A 7E 62 6F 0A 68 68 66 


$9635 












•mmt 


J _ 


2648 
2650 


66 27 79 62 65 7D 63 64 

60 0A 73 65 7F 78 flA 7E 


$CC6C 
$9479 


2820 
2828 


66 64 73 65 64 27 7E 62 
6F BA 6F 76 7F 68 7E 65 


$CAC6 

$373A 




Convert woros | 


Ifl 
20 


- J9FA2 

- IB3B£ 


50 
60 


- $6803 

- $CBC4 


2658 


78 7F 6F flA 69 65 66 65 


$0557 


2830 


78 27 79 7E 65 64 6F 62 


$2384 


2660 


78 79 27 6E 78 63 7C 63 


$8326 


2838 


6F 64 60 6f 27 7E 62 6F 


$BE16 


38 


- $4969 


70 


- $4468 


2668 


64 60 flA 67 6F flA 7F 7A 


$36AC 


284fl 


0A 66 66 66 67 65 27 


$0CU 


40 


- J9625 


80 


- $148F 


2670 


0A 7E 62 6F flA 7D 66 66 


$8686 
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BACKUP 
PROTECTED SOFTWARE 

with COPY II PLUS™ ver. 5 

From the team who (iist brougtit you COPY n PtUS in 1981 comes a comptetdy 
updated disk backup utility tor your Apple // computer. New features include: 

• Fully autotiMlic bit cofqr*. All parameteri ate stored on disk. Siltl|)lr type in the 
name of ttie progiam you wish to tiackup. and COPY II PLUS does the mt! 

• New iitllltie« includirw Alphabetize Catal<^ Fast 2-pass Disk Co(y on a /A or /M. 
and an jdi-new Sector Editor. 

• Supplied on a ■tandard DOS diskette. Runs on the Apple //, Appfc^#'4, 

Apple //e, Apple //c Requires 64K and one or two disk dtivei >■* 



Inciease the power of your Apple //. 
Use COPY n PUB™ 5.0 



^>.^. 



!■*, 



Oil U-F 8-5:30 (W. Coast time) with >our 3E 
Or send a check (add $3 s/h, $8 overseas) to 




503/244-5782. 



/Central POINT 



^^^ <><>n AB f 'ENTRAL POINT 

C*r V«»"»"5 ^Software, Inc. 



9700SWC»pitolHsvy, *100 
Portland, OR 9TZ19 



* W update Co^ U Plui Rgiitarijr w huxBMMW pMedioiK jni IS ■ 
" me in 1/3 pitai (lb Ufidale. iuM Knd orlgfiMt OMt atxl m.) 



Avner m>|F uiidM a iiy 



^^^r^^^?^fc^^^T ^^^r- 



\% 



WHO 



LIKES 

THE 



HERE ARE JUST A 
FEW OF THE MANY 




an Htantiai pan o1 tha Appl«-u5«'t r*pa4oir«" ■ APPLE USER 

manual II pnact^lly worth hiving on Hi own" -W ASH INQTON 



"a valuable buy 
APPLE PI" 

-tha loN» a< GOWsn OMICKlut WiotM M 
HABOCORE COMPUTIST 

'tnultil*isstsd"-NI8e4.E -.,.-' .•■ 

tna iMMt oompranen siva <iitii (ccMaor I nn* aw coma aooaa" -A.B.. VERNON. 
CANADA 



. wom milimW • 






"Ml abtitty to unlodi ollwr programi will gnatly halp ma" 
FRANCISCO. CALIFORNIA 



on. B.P.. SAN 



"an ijccatlani tat of progfama . 
KEYNES, ENQLAND 

"vBfv. vary aducationai . 
TLICSON. ARIZONA 



"a varvanllgtitinmgpiBCaolionwiiara^QOQli ■ 
BLAINE. MINNESOTA 

i Uka youn in* BESr' - R.R.. CHICAGO 



. jual great - am) bppO vahia loo" -E.A.S. MILTON 



It 11 FANTASTICIfin"" - J.C., 



. topofmyHatlorgoaObuyi'-HS . 



Why all tha •icitamani alMut tna CIA (conlMMniiii mtormation advitora)'? 
Probibly twciuM It Is ina ONLY Ml ol utilrtia* (S in iN) wtilch aniMa avtn * 
baginnar lo invaiiiBita. Mil. locata. i»i. traoa. rescue, tnmiaie. patch, repur. 
wrl^. aunwna, protect, improtsct. arulyia, ancrypL and decrypt programs do 
normal AND protected disks Vou alio get the "CiA Files', a 65000- woid twoh 
wtiich eoolaini dateited instmctiont lor using the CIA pluseasy-to-lolloo'. I>and- 
tiotding tulorials at»u( patching, repair, tormalling, encoding, protection, and 
THimaroui owar disk lopica. You'll Imd plenty of malarial haia mtiicn Ma nanar 
belore appeared m prim. PROGRAMS NOT COPY PROTECTED 

To put the S C,I,A uUIKIea. plus booh, on the trail ot your AfifM II + , lie. ft lie dMca, 
aand M6XK> by ctiack or money order tot 

OOLOEN OELtCtOUt SOFTWAM LTD. 
laa Fmh Annue, luHe 33M, Depl H, New yorii, New tsiti IMIl 



DEALERS 

Overstocked on computer magazines 

that seem to have 

MORE ADS than articles? 



Put Hardcore COMPUTIST 
on your shelves, instead! 



Here'* how; 

Send in the coupon below and we'll put your dealer 
info in the mail. DON'T V^AIT! Apple computer users 
everywhere salute you! 




,,. i ^'rv •' |"' i ^ j C i ?f'| — L 



-*=r* 



v^- -—,.»,.%« to: Hardcore COM«lh»!i«> •gat lOtW, 






»• '■' 





CoeywaMT teas wujm gTEmtHi 


O JlWiJ-li 


DISK EOITIMO SYSTEM 


±1 f. 


Ppn THE AM>LE a FAMILY OF COMPUTERS 




UStNO DOS 3,3 OR DOS 3,3 WITH 




PRONTO-DOS ENHANCEMENT 








DISC 

COMMRNDER 



e4 Edilorae13 Sub-editors* Comptetely menu driven a 1 or 2 drive 
operationelNSTnUCTOniALS end TECHNICAL INFORMATION tin dl»K 
eSort cetalog entrieaeHlde cilalog antrlase Create mull Ipte heading 
ca I alogse Create mulu-column catalogs e Reassign lock/unlocii a«M 
Ilia I ypaaymbols.apaeas.columna. catalog heading and program til tea 
lo any combination ol NORMAL, FLASH, INVERSE. LOWER CASEof 
CONTROL ehariciof ti Rename alt DOS eomntands e RewrMa ail DOS 
error nwasages s Matte a (non-WTOC dependent) disk map showing 
the TRACK /SEC TOR LISTS, VTOC and CMALOO TRACK /SECTORS 
s trace out individual the* a Change the HELLO program e Change 
any byte anywhere on a diak Make in ■ true I Ions, diali mapa, 

Irack/sector disptaya and .^^^^^^ traces using your printer 



AND MUCH 




MUCH MORE 



SO WHAT \^Zy SOFTWARE 

toz;i Slater A <e Suite t03 Fountain Valley, Ca B2708 






■o 



*• C 
1. • 

O V 



3 m 



O 
>■ 



E o 

lb, 

O o 

•« s 



1 1 

• ■£ 
m • 

a 

UJ 

o 

IE 

o 

o 



WARNING! 

You are entering DANGEROUS territory 



The 



Book of Soiftkeys 

shows you how to softkey 

( remove copy-protection from ) 

commercial software. 



VolumO /contains softkeys for: Akalabeth, Ampermagic, Apple Galaxian, Aztec, Bag 
of Tricks, Bill Budge's Trilogy, Buzzard Bait, Cannonball Blitz, Casino, Data Reporter, 
Deadline, Disk Organizer li, Egbert II Communications Disk, Hard Hat Mack, Home 
Accountant, Homeword, Lancaster, Magic Window II, Multi-disk Catalog, Multiplan, Pest 
Patrol, Prisoner II, Sammy Lightfoot, Screen Writer II, Sneakers, Spy's Demise, Starcross, 
Suspended, Ultima II, Visifile, Vistplot, Visitrend, Witness, Wizardry, Zork I, Zork II, Zork 
III, plus how-to articles and program listings of need-to-tiave programs used to make 
unprotected backups. 

Volumes U and III are being compiled now! 

YES, I want copies of Tlie Book Of Softkeys Volume 1. I have enclosed $20 per book. 

Foreign orders add 20%. U.S. funds drawn on U.S. banks, Washington state orders add 7.8% 
sales tax. Send your orders to: Softkey Publishing, PO Box 110816, Tacoma, WA 98411 

Name ^ HC23 

Address _^ 

City . . .StQtB Zip. 

Country Phone, . 



Visa,MC Exp.. 

Signature _ . . 



If you want to make backups, tt>en you want Tti© Book Of Softkeys Volume I, 
the only resource that teaches you how to backup your expensive Apple )( software. 



'^^. 



iitfee-^^ ■■■■■■- 

I Public Domain Software 

- SPECIAL 

From Tlie COMPUTER LEARNING CENTER! 



GET Over 170 



BUSINESS 
& FINANCE 

Programs FOR ONLY 



i ^,-4-*^ *^ 



• Forecast youc investment pnofits, and evaluate the worth of your 

stock portfolio 

• Experiment witli Viaicalc fonnulas, real estate and stock plot* 

and design a business or personal letter writing format 
■ Organize your household expenses 

• Balance your checktMok, manage your loans, payroll 

The Busineu & Finance SPECIAL contain* the following 
programs and many more... 



Annuity 

Bond Price & Interest 
Budget Monthly 
Decision Ma^x 
Financial Pak 
Keogli Savings Program 
Mortgage Calculation 
Regular Deposits I 
Stocks 

Calendar Personal 
Letter Writer 
Phone List 



Re^ EsUte Plot 
Visicalc Fonnulas 
Business Finance 
Check Stub 

HousehoM Exp. Profile 
Income Tax 1040 For 77 
Inventory Company 
Average Growth Rate 
Check Book Balancer 
Income Taxes 
Interest Earned 
Loan Balance 

ORDER NOW! 



Savings Growth 
Treasury Bill Valuation 
Address File 
Compound Int. Tables 
File Manager 
Home Accounting 
Names Search 
File Cabinet I 
Family Finance 
Gen Ledger Printer 
Constar 
etc... 



■: tr.>:> 



You will also receive a complete catalog of Public Domain 
Software available from the CLC with your order. 



□ Yesl Please send me the Business & Finance Special Offer 
(Volumes 18-25 from the CLC Public Domain Library). I understarrf 
that Public Domain Software is not commercial quality and is sup- 
plied as-is and that orders are filled on double sided disks. 



Name 



,8-4 



Address. 
(Sty 



■,''U2}<W[l Phone 







Courtry . 
VISA/MC 

Signature 

Send check or money order {US funds drawn on US bank) to: 
Computer Learning Center, PO Box 110876-HC, Tacoma, WA 
98411, Washington residents add 7.8% sales tax. Foreign orders 
add 20% shipping and handling. 



(Tht Camputv Lmnlna Conler'* PDS Ubrnry confabs ovtt 175 vokmm, 
whkh wHtrunan ApfM }[ Ptui computers $rm Appm compatftito*. Matt will 
•teo run on Appk //» and //c.) 



NEW DON LANCASTER RELEASES 

Available ONLY rrom Synergellcs. All sortivart open and unlmked. 



ABSOLUTE RESET (llc/old He/new He) St9J0 

Get back in total comrol. No more hole bluiing! AcceM any pan 
of any ptoErain at any time ror any reason. Passes all diaunouic*. 
tavlilble Ifll Ktivaled, Inclmie* EPROM bunlej- adapter delaili. 
terv^ liBtinits, ^nd a fVee booo» book, 

APPLEWRITER'" TOOLKITS (DOS 3.3 or ProDOS) $39J0 

EIGHT diskette tidis include a completi! disassemhlj; tcnpt; souice 
code CipttJTins', self.promplifig glosBarica; Diablo microjuslify ant) 
pinportlonal apace, pniches includins NULL, shottline, Orappler, lie 
deiJasiiinK. many othei^n answers tn most help line (juesjions; two 
columns: WPL secieis; space on disk; keywoid indexing; mulli and 
even-odd headera; btmdies more, ,=^ . ^^, . - . . 

Both TOOLKITS (sixteen disk sides )... .?>«,•.'. «*».-. . . . $59,50 

APPLEWORKS™ DISASSEMBLY SCRIPT $49,50 

TEN disketle sides chock lull of Applewoik's innetmoit secrets, 
using Don's unique and powerful "learinE method". Primarily for 
eonzo hacken and definitely NOT ror the Taint of heart 

•LASERWRITER/APPLE WRITER UTILITIES $39.50 

Two yolume package gives you nnmatchably superb lie lent and 
graphics. Included are amomatic formatters, boites and rancy 
ootders. daisy wheel changers, envelope and label routines, 
^ ' imbaltevably fast ronn letters, grids and rulers, HIRES converters, 

DC1 patches, demos, powerful justiry routines, telf-pn>mptin» 
glotsarlei, help screens, a sign shop, outlined text, more, 

ACTOGRAPHED LANCASTER BOOKS! - ii»' "• 

Apple He Assembly Cookbook ....'.-. , . , . til3B ' 

All About Applewriter He , (14J0 

• EBhaocing Your Apple 11 * He, (Volunse I or II) *ISJO 

Micro Cookbook {Volume 1 or II) $15,50 

CMOS Codkbook , - $14,50 

TTt Cookbook , ■ ■ ■■■■■''■ .tl2.M 

Incredible Secret Money Machine . , , ■ , • > • f > ■ h.^i ■ ■ ■ ■'*2i2i ' 
Complete book and softwaie list . A^t.^ . tit * .- if^ ^'^ * ' *'^R«# ^ '■ 

COMPANION DISKETTES! ' '" '' 

For Enhancing Your Apple 11, Voluone I J19J0 

For Enhancing Your Anilo II. Volume II ,....■.., J19,S0 

For Don Lancaster's Assembly Cookbook *19,50 



H 



SYNERGETICS 

746 First Street 

Box 809- HC 

Thatcher, AZ, KSS52 






FREE 
VOICE HELPLINE 

(602) 42S-4073 



] 



viIa Aad HJ^ffKBCIIAilGE K«p»ri- Fl«i*« - m COD, r<vflaii. of f UKhitu ofdm. 



' •■"'- •■'*--'^ 



THE MOST POWERFUL BACK-UP UTIUITY 
YOU'VE EVER SEEN... V^ 






J. J^K, 



■.'— ^ 







$59.95 adUSs ghifi. 

» Back-ups 1/2, 1/4, 3/4 tracks. ,^ _^ 

« Automatic back-up options. "^ '■■ "" "'" 
* No parms needed for most of the back-ups. 
** Excellent DOS copy on flip side. 

ftsk for our other products RAn-LOCK(for L-SmJ.th) 
And also SHOUG I (Japanese chess-type Qms>) -"^^v 

- ART GALLERY 
Yoshinoya Bldg,438 Sasu-machi,Chofu-8hi 

Tokyo 182, Japan 
Send tnoney or check. UlSA/WASTER CARD accepted. 



J 




BACK ISSUES 

Issue Mag Dish 

$4,75 $9.95 
HC 22 D D 

HC 21 i tQ . I't D . . . ■ 

HC 20 ip;.;v.i..D 

HC 19 .^Ih.^^ . . n . . . . 

t i ^ ■ % -.^ 

HC 18 .VQ;:.----0.-.- 

HC i7......^.ar.^^^..n.... 

HC 16 ...Oi, .,..,. .a..., 

"■="■■; ?;-«-°:--- 

HC 11 > . - - O * 1 ..... . Elti. . . . 

rl** *' ■ * r» * r-» ■-■^ n iij Aj j^'* i-f.-' i . LI . . . ■ 

HC 1 « *^ i . p , .0 . ^, .••« Mow 

c 1 n....ii 



HC t /c 1 



. dl.k only . 



Send m« th» back Ihum Indteitmi abov: 

Name 




NEW SUBSCRIBER? 

of Hardcore COMPUTIST 

and ^CORE are PACKED with information that you won't want to miss! 



Signsture 



Send clwck sr money ordar to: 

Hardcore COMPUTfST, PO Box l lt)846-T, 
Tacoma, WA 9641 1 . Most orders shipped 
UPS. Please use street addrass. Washington 
residents add 7,B% s^s tax. Foreign orders 
add 20% shipping and handling. US funds 
drawn on US bank. 



Hardcore COMPUTIST 22: Softkeys fw Minet awSer, lode Funwf, A2-PB1 Pinball; Headers' Scflkeys to ths Heist. Old Ironsides, 

Gfsndffla's Hoijsfl, In Seardi o( the Most Amuing TWng, ^torioc'j Towi, Mraidw. Stsgai III: Feauwr CiBlomiwd Driw Speed CnW, Super 

CB version t.6; Cote: The Macro Syaem 

Hardcore COMPUTIST 21:Softkeys (to 06 Mister wrskm 4+ , Dante Draw, Archon. TwrjH; Headers* SolBteys to Advanced Bladtjadt. 

Megawxtis, Summer Games, CollsDe Entrancs Euan Prep, Applswritsr wMted: Features: Damystiiying Tt» Ouartei Ttaok; Cm: PrasMM: A 

ProDOS Disk Monitor 

Hardcore COMPUTLST 20: Softkeys (or Ssrgon III. Waardry; Proviog Grwjnds ol tte Mad Owrtord wuJ Knigld ol Diarmodi li» Rspon 

Card vl.1 and Kidwriief I Apple ]i Bool ROM OisasMfflbly I TJie Graphic Qtmer rt.O / Copy II + 5.0: A Review ; Tfw Kmx^Drlvi- A Hardware 

Evaluition I An Improved BASICIBrnary Combo 

Hinlcora COMPUTIST 19: SolOwys lor flendezwus Wiih Rama, Peachtraa's Back To Bosics Awountkig System. HSD StaUsties Sedes, 

Arilhmelickle, Arilhrneiiicks and Early Games for Chikiren I Ooiitjle Your flOM Space I Tt» Gamee ol 1964: In Revie*- Part II I Towanis > 8*r Fl 

ROM I Ttie NiWer; A Ulilil/ Program 1o Examine Haw Nibbles From Disk 

Hardcore COMPUTIST 18: SolUieys (or the Scholastic V«aon el Smk Street Writer, Applewrtter m, SSI's Non-ROOS Diake, BPI 

Aocotiniing Programs and DeagnWare Programs ' Mailing a Free Sector Pitch Inlo Applewritet m I The Oimet ol 19H: In Review ( eSCCe Ct^ 

Now Availeble I ChecttscH v2 1 Simpie Copy Prsiectiai 

Hardcore COMPUTIST 17; Sofflieys (ot THe Print Shop, Crosamrd Magic. TM Standing Stones, Seer flun, Sfcytw, and Bwriom Ham 

Disks I A Tuiorial for Disk Inspection and the Uw ffl SufHf 106 1 Ttre Gr^c Grabber for The Print Shop I Tha Lone Caialog Araoger Patt Two / 

S-C Macro Assembler OitectiKes (Heprint) 

Hardcore COMPUTIST 16: SoNkeys fat fleicue Raiders, SheHa. Bask: BdUinj Blocks, Wsd Propims, CnttHirB, Sensible SpeSer for 

ProOOS and Ssdeways I Sects! Weapon: RAMcard I Tlie Conttdlsr Writer f A Fix Fo( The Beyond Cealle Woltensieln S^tksy/Ttie Lone Cilakn 

Arrwflet Part 1 ' 

Hardcore COMPUTIST 13: Sodkeyt lof Lif Pak, 8e^ Caatte Wdlenstein. Tnniylvania, The Quesi, Elscironic Arts, Snooper Troopi 

(Caw 2), OLM Sottware, Lewnlng With Leeper . I TelStar ' CSaver: m Advanced Way to Store Super 108 Controiieis I Adding New Commands lo 

DOS 3,3/ Fixing ProDOS 1.0.1 BSAVE Bug / REVIEW: Enhancing VoK Apple ( Locksmilh 5.0 and Locksmitti Programming Language. 

Hardcore COMPUTIST 11: Copy II Plus 4,4C Update I FARMS for Essential Data Di^icawt ( Uttimaket III I Mapping o) LBima 

III / Ultima II...The flesl o( the Picture I SotUwys tor Sensible SpeJIer, U»ima HI. Softporn Adventure, The Einstein Conquer v5.3, & 

Mask of the Sun 

Hardeor. COMPUTIST 4: LHtlme II Gharecter Editor I Sd«kaya tor Ultima II, Wtness, Prisoner II. & Pest Patrol / Adventure TkBj' 

(Of Uttima II & III I Copy II Plus PABMS Updsle '-'^ 

Hardcore COMPUTIST 1 : Softkeys to Data ftepttter. MulSplan i Zork / PAIMS bf Copy II Plus / No Mm Bt^ ' AITi to QxfVMI'' 
Cannonbal Bliti I Reviews: Reptay. Crackahol. Snapehol l WiUeard copy cardk * ,-::!i:^' u^W: ' <t'^'^ '^■3^ 

CORE 3 Games: Ctoetrucling Your Own Joyatk* I Compiling Games I GAME REVIEWS: Over30otlhelitestmdt»stfPickOfTh« fW(^ 
AII-iiTO TOP 20 games I Desfrutliw F<nei / EAMON ( Graptiics wi^idan and GraFORTH I and Dragon Dungeon , ,^j 

CORE 2 Utllltl«B: Dynamic Menu / Hleh Res: Scran Demo/ SOTO Label: Rtplact/ Line Find ^ (Wc* Copy: Ci«L;^^ '^'S''^^^ 

CORE 1 Graphic*: Memory Map « Text Gn^itiict; Marquee. Spitts.Jqged Scroller /Low Res: CdofChancter Chad/ MghRit: Screen 
Cruncher. The UFO Factory / Color ; Vector Graphk»:Stiimmering Shapes, A Shape Table MiniEditot / Bkick Graphics: Arcade Quality Graphks fa 
BASIC Programmers / Animalnn. 

:t^- c t*s'^> > n ' ■iB'-.a- "■fnff ntv< l '* 

(*CORE is no longer published as an independent quarterly magazine.) 
Back issues not listed are no longer available. But disks are still available for 
ALL sold-out issues of Hardcore COMPUTIST upon request. 



Don't TYPE IN programs that appear in 
Hardcore COMPUTIST. ^ 






» 



j^&i-^.^.^ Cti.\-f 



Order the 

Library Disk 

instead! 



ji. 



J. /'■•fi«1>> 



'^ti^-r 



} 



Offer good vvtilie supply lasts. 



Each month a Library Disk with aH the programs that appeared in the previous 
issue Of Hardcore COMPUTiST is prepared for SMART READERS lil<e you who 
hove bett&r things to do with their time than type in program listings. Please use 
the order form to tt>© ieft to order disks. 
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By HaLckers 
Ror Hackers 


The 




► ELITE BOARD DOWNLOADS 

* CRACKING TIPS 

* PHREAKING SECTION 


BOOT-LEGGER 

MAGAZINE 




» GAME CHEATS 






» PARMS 
► PROGRAMS 


Subscribe Now! 


F 


» INTERVIEWS 

• ADVENTURE TRIPS 

• HACKING TIPS 

• MYSTERY SECTIONS 

'ubiished on tioth sides of 


Send 25 Bucks for a 1-Year Sutiscription 
THE BOOT LEGGER, 3310 Holland Loop 
Road, Cave Junction, Oregon 97523. 
Overseas Subscriptions $50. 
Canadian $30 U.S. Currency. 


an Apple diskette - 
4 times a year. 


FOR AD INFO. & QUESTIONS 
CALL BOOTLEG AT (503) 592-4461 




You want the old Issues of Hardcore Computing? 

Well, WE'VE TORN OFF THE FANCY COVERS! 

Hardcore 



• And deleted all of the editorial 
material, out-of-date interviews and 
letters 

• And updated the remaining 
material and included an enormous 
iist of bit copy parameters 

• And PACKED IT ALL 
into a single volume 

Don't wait. 
GET YOUR COPY NOW! 



The Best Of 



Computing 



To order your copy of TKe Best Of Hardcore Computing send $19.95 check or money order (US 
funds only) to: Hardcore COMPUTEST. PO Box 110846-B, Tacoma. WA 9841 L Washington state residents 
add 7.8% sales tax. Foreign orders add 20% shipping and handling. VISA and MC orders enclose signature and 
expiration date. 




SOFTWARES INC. 



i 
1 



I V 



/ 



\ 



jghere you can find Imported softwares and books and lots 
lots more at reasonable cheap prices. 

If you have a newly made games, utiliti^ or peripherals, 
and wish to sell them in Japan, we welcoote your inquiry. 
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V- Al Bergo Odhancmizu 716, 2-1-19 Kanda-Suru^dai, C3iiyoda-laj 
Itikyo 101, JAPAN 03-294-6502 

lile do not deal or hiu« «ny jr»l.«tion^;'»«i th Pine-Corn 
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